artifact_url without artifact_sha256 must fail when verify=True.

as_handler() should raise when autogen_core is missing.

as_hooks() accepts a custom name.

as_hooks() returns a GovernanceHooks instance.

Each call to as_middleware() returns a fresh middleware.

Test risk assessment for high risk system

Test risk assessment for minimal risk system

Test risk assessment for unacceptable risk

Each assess() call is recorded in the assessments list.

Messages with associated data encrypt/decrypt correctly.

Associated data is initiator IK || responder IK.

The evaluator must forward proof_artefact and verification_pointers into ``PolicyDecision.audit_entry`` when a backend provides them. Without

AST visitor flags eval() calls.

Calling astream should raise NotImplementedError, not bypass governance.

Test automatic async detection.

Events emitted are delivered via the async consumer.

AsyncPolicyEvaluator evaluates policies asynchronously.

AsyncPolicyEvaluator allows non-matching context.

Regression: previously the asyncio.Lock around the executor call serialized async evaluations. Several concurrent ``await evaluate(...

Async function that always fails raises after max_attempts.

Test async intercept_tool_execution allows authorized tools

Test async intercept_tool_execution blocks unauthorized tools

Async kickoff should log execution start and completion.

Async bus respects glob patterns.

async_post_execute should delegate to sync post_execute by default.

Each async_post_execute call should increment call_count.

async_pre_execute should respect blocked patterns just like sync.

async_pre_execute should delegate to sync pre_execute by default.

functools.wraps preserves __name__ for async functions.

Events are dropped when queue is full.

Test async shadow mode returns simulated results

Stop drains remaining events from the queue.

Async function that succeeds immediately is called once.

Async function that fails then succeeds is retried.

Test executing async tool via handle.

Test atomic increment/decrement operations.

If yaml.dump blows up mid-write, no tmp file is left behind.

Repeated install() of the same plugin replaces the manifest atomically.

Attaching and detaching sinks works correctly.

Test creating an attestation.

controls_total was not hashed, so forging the count was free.

Regression: recalculate_hash previously omitted ``passed``, ``controls_passed``, ``controls_total``, and control detail fields. An att