docs(P02): review + audit — APPROVE_WITH_NOTES, HEALTHY, 2 P0 fixed

REVIEW.md: 2 P0 fixed (stale test defaults, sandbox isolation),
  8 P1+ flagged for post-hoc review. Verdict: APPROVE_WITH_NOTES.
AUDIT.md: 0 critical, 5 warnings. Reconstruction PASS, file
  discipline PASS, branch hygiene PASS, commit discipline PASS.
  Verdict: HEALTHY. Doc-drift fixed (REQ statuses → complete).

P0 fixes in working tree:
  1. lxc-config.bats: aligned stale defaults with production code
  2. lxc-deploy.bats: fixed sandbox isolation (HOME redirect)

---ci---
project: praxis
phase: 2
milestone: v0.2
status: review
---/ci---
This commit is contained in:
Praxis CI
2026-08-03 18:54:38 +00:00
parent 3262bfd946
commit 1b3617da3b
8 changed files with 562 additions and 365 deletions
+5 -5
View File
@@ -171,14 +171,14 @@ teardown() {
grep -q '^lxc.environment: DEEPGRAM_API_KEY=dg-key$' "$CONF_FILE"
grep -q '^lxc.environment: CARTESIA_API_KEY=cart-key$' "$CONF_FILE"
grep -q '^lxc.environment: OLLAMA_API_KEY=oll-key$' "$CONF_FILE"
# Ollama config defaults present.
grep -q '^lxc.environment: OLLAMA_BASE_URL=http://ollama.cloudinit.dev:11434$' "$CONF_FILE"
# Ollama config defaults present (match lxc-config.sh + .env.example).
grep -q '^lxc.environment: OLLAMA_BASE_URL=https://ollama.com/v1$' "$CONF_FILE"
grep -q '^lxc.environment: OLLAMA_ROLEPLAY_MODEL=gemma4:cloud$' "$CONF_FILE"
grep -q '^lxc.environment: OLLAMA_DEBRIEF_MODEL=deepseek-v4-flash:cloud$' "$CONF_FILE"
# Deepgram defaults present.
# Deepgram defaults present (match lxc-config.sh + .env.example).
grep -q '^lxc.environment: DEEPGRAM_MODEL=nova-3$' "$CONF_FILE"
grep -q '^lxc.environment: DEEPGRAM_LANGUAGE=en-US$' "$CONF_FILE"
grep -q '^lxc.environment: DEEPGRAM_REGION=us-east-1$' "$CONF_FILE"
grep -q '^lxc.environment: DEEPGRAM_LANGUAGE=en$' "$CONF_FILE"
grep -q '^lxc.environment: DEEPGRAM_REGION=na$' "$CONF_FILE"
}
@test "config: voice-service keys default to empty (v0.2 infrastructure-only)" {
+11
View File
@@ -114,6 +114,17 @@ EOF
export PROXMOX_TEMPLATE_VOLID="local:vztmpl/debian-12-template.tar.zst"
export GITEA_TOKEN="gitea-test-token"
export PROXMOX_LXC_VMID="200"
# Isolate from the operator's real .env.secrets files: lxc-deploy.sh
# sources ~/coreci/.ciagent/.env.secrets + .ciagent/.env.secrets, which
# on a live deploy host would override the test's PROXMOX_LXC_VMID (and
# other vars) with cluster values. Point HOME + the script's PROJ_ROOT
# computation at the sandbox so neither secrets file is found (the
# deploy script emits a warning + relies on the exported test env).
export HOME="${STUB_DIR}"
# Stub cd so PROJ_ROOT resolves inside the sandbox: lxc-deploy.sh uses
# `cd "${SCRIPT_DIR}/../.."`. SCRIPT_DIR is the sandbox <ROOT>; we make
# <ROOT>/../.. resolve to <STUB_DIR> by creating <STUB_DIR>/.. (already
# exists) — the default mktemp parent. No .ciagent/.env.secrets there.
# Reset the health-check call counter between tests.
rm -f "${CALL_LOG}.hc" 2>/dev/null || true
}