O8A Report 06 — Test / static / security result

• macro: v0.6-o8a-live-execution-wiring-authoring
• date_utc: 2026-05-21 · host: vmi3080463 (Contabo)
• gate covered: G5 tests / static / security

1. Full test suite

pytest is not installed in the system python3; the v0.6 suite is unittest-based, so it runs with the stdlib runner:

$ python3 -m unittest discover -s tests -p 'test_*.py'
Ran 394 tests in 7.518s
OK

baseline_tests:  366   (O7-/O8-certified)
new_o8a_tests:    28   (test_orchestrator_o8a_live_wiring.py)
total:           394
result:          394 PASS / 0 fail / 0 error
regressions:     NONE

The pre-existing Mode.LIVE-refusal tests (test_orchestrator_o2_phase_bodies, _o1_runner, _o2_e2e, _o4_live_dryrun) still pass: a Mode.LIVE phase / runner.cut with the kill-switch OFF still raises ProductionExecutionNotAuthorized. The milestone-gated tests still pass — __milestone__ was left at O4.

2. Static checks

Check	Result
module-level PIN_* in new/edited orchestrator code	NONE — live_execution.py exposes only role-name constants (PRINCIPAL_EXEC/VERIFY), classes, helpers
assert_no_module_level_pins (orchestrator policy)	PASS — no PIN_-prefixed module attribute
secret-shaped literals (password/dsn/api_key/…) in new code	NONE — the only matches are docstrings stating "owns NO secret"
hardcoded runtime IDs (digests / change_set_id / DSN)	NONE — all per-run values flow through RunContext / injected collaborators
import health	PASS — import cutter_agent.orchestrator + live_execution + runner + PHASE_REGISTRY (11) all clean

3. Security review

execution_enabled_default:    False  (backing constant unchanged)
kill_switch_locks:            3  (execution_enabled() fn ; refuse_if_killswitch_off
                                  in every phase ; adapter _assert_live_allowed)
mode_live_simulator_fallback: IMPOSSIBLE  (require_live_adapter raises;
                                           no else-to-simulator on the LIVE branch)
default_collaborators:        REFUSE  (connection_provider / backup_runner /
                                       governance_writer / verify_writer)
secrets_at_module_scope:      NONE  (no DSN / .env / GPG key / token)
user_artifacts_accepted:      NONE  (no user-supplied digest/secret/id)
real_crypto:                  untouched  (StubSigning interface only)
production_mutation:          NONE  (sandbox / fake DB only)

4. Verdict

G5_test_static_security: PASS
tests:    394/394 PASS (28 new, 0 regression)
static:   no module-level PIN_, no secret literal, no hardcoded runtime id
security: kill-switch defence-in-depth; LIVE→simulator fallback impossible;
          execution_enabled stays False; collaborators refuse by default