test(sccm): prepare client management corpus

crates/cmtraceopen-parser/tests/fixtures/sccm/client/management/README.md

@@ -0,0 +1,14 @@
+# SCCM client-management fixture corpus
+
+This directory contains synthetic, proposal-only contracts for issue #326.
+Nothing here is a production extraction profile or evidence that a source was
+validated on Windows. `CoManagementHandler.log`, `Scripts.log`, and
+`CcmNotificationAgent.log` are admitted only for this deterministic test
+profile. The sanitized `SCClient_SYNTHETIC_*.log` and
+`SCNotify_SYNTHETIC_*.log` names are deliberately marked
+`candidateUnsupported`; their records must not be parsed into operational
+findings.
+
+Every semantic record contains `SYNTHETIC FIXTURE`. All identities, handles,
+paths, versions, and signals are fictional. Physical fragments remain separate
+through artifact IDs, relative paths, rotation state, and path fingerprints.

crates/cmtraceopen-parser/tests/fixtures/sccm/client/management/co-management-intune-owned/evidence/client-co-management/current/CoManagementHandler.log

@@ -0,0 +1 @@
+<![LOG[SYNTHETIC FIXTURE Workload=Scripts Ownership=IntuneOwned OwnershipEpochId=OWN-326-INTUNE-1 Disposition=Handoff Terminal=true]LOG]!><time="10:00:00.000+000" date="07-30-2026" component="CoManagementHandler" context="" type="1" thread="326" file="">

crates/cmtraceopen-parser/tests/fixtures/sccm/client/management/co-management-intune-owned/expected.json

@@ -0,0 +1,40 @@
+{
+  "contractState": "proposedPending318And319",
+  "scenario": "co-management-intune-owned",
+  "workflow": "coManagement",
+  "extractionProfile": {
+    "id": "sccm-client-co-management-5.00.test-v1",
+    "versionPrefix": "5.00.TEST.",
+    "selectionState": "selected"
+  },
+  "ownership": {
+    "classification": "IntuneOwned",
+    "confidence": "high",
+    "terminalHandoff": true,
+    "workload": "Scripts",
+    "evidence": [
+      {
+        "artifactId": "co-intune-owner-current",
+        "startLine": 1,
+        "endLine": 1
+      }
+    ],
+    "coverageGapArtifactIds": []
+  },
+  "coverage": [
+    {
+      "artifactId": "co-intune-owner-current",
+      "logicalArtifactId": "client-co-management",
+      "state": "captured"
+    }
+  ],
+  "transactions": [],
+  "sourceLocalObservations": [],
+  "findings": [],
+  "prohibitedClaims": [
+    "time alone proves causality",
+    "Intune handoff is an Intune failure",
+    "unsupported Software Center source is parsed",
+    "missing coverage proves success or failure"
+  ]
+}

crates/cmtraceopen-parser/tests/fixtures/sccm/client/management/co-management-intune-owned/manifest.json

@@ -0,0 +1,38 @@
+{
+  "sccmManifestVersion": 1,
+  "contractState": "proposedPending318And319",
+  "proposalOnly": true,
+  "syntheticFixture": true,
+  "scenario": "co-management-intune-owned",
+  "workflowFamily": "coManagement",
+  "bundle": {
+    "bundleId": "sccm-326-co-management-intune-owned",
+    "captureHost": "LAB-CLIENT-01",
+    "role": "client",
+    "siteCode": "LAB"
+  },
+  "artifacts": [
+    {
+      "artifactId": "co-intune-owner-current",
+      "role": "client",
+      "logicalArtifactId": "client-co-management",
+      "sourceName": "CoManagementHandler.log",
+      "catalogState": "admitted",
+      "parserEligible": true,
+      "captureState": "captured",
+      "relativePath": "evidence/client-co-management/current/CoManagementHandler.log",
+      "sanitizedSourcePath": "SYNTHETIC://client/management/co-management-intune-owned/CoManagementHandler.log",
+      "pathFingerprint": "safe:path:326:co-intune-owner",
+      "sourceVersion": "5.00.TEST.3260",
+      "encoding": "utf-8",
+      "rotation": {
+        "kind": "current",
+        "fragmentComplete": true
+      },
+      "collectionLimit": {
+        "capped": false,
+        "limitBytes": null
+      }
+    }
+  ]
+}

crates/cmtraceopen-parser/tests/fixtures/sccm/client/management/co-management-sccm-owned/evidence/client-co-management/current/CoManagementHandler.log

@@ -0,0 +1 @@
+<![LOG[SYNTHETIC FIXTURE Workload=Scripts Ownership=SccmOwned OwnershipEpochId=OWN-326-SCCM-1 Disposition=Owned Terminal=true]LOG]!><time="10:01:00.000+000" date="07-30-2026" component="CoManagementHandler" context="" type="1" thread="326" file="">

crates/cmtraceopen-parser/tests/fixtures/sccm/client/management/co-management-sccm-owned/expected.json

@@ -0,0 +1,40 @@
+{
+  "contractState": "proposedPending318And319",
+  "scenario": "co-management-sccm-owned",
+  "workflow": "coManagement",
+  "extractionProfile": {
+    "id": "sccm-client-co-management-5.00.test-v1",
+    "versionPrefix": "5.00.TEST.",
+    "selectionState": "selected"
+  },
+  "ownership": {
+    "classification": "SccmOwned",
+    "confidence": "high",
+    "terminalHandoff": false,
+    "workload": "Scripts",
+    "evidence": [
+      {
+        "artifactId": "co-sccm-owner-current",
+        "startLine": 1,
+        "endLine": 1
+      }
+    ],
+    "coverageGapArtifactIds": []
+  },
+  "coverage": [
+    {
+      "artifactId": "co-sccm-owner-current",
+      "logicalArtifactId": "client-co-management",
+      "state": "captured"
+    }
+  ],
+  "transactions": [],
+  "sourceLocalObservations": [],
+  "findings": [],
+  "prohibitedClaims": [
+    "time alone proves causality",
+    "Intune handoff is an Intune failure",
+    "unsupported Software Center source is parsed",
+    "missing coverage proves success or failure"
+  ]
+}

crates/cmtraceopen-parser/tests/fixtures/sccm/client/management/co-management-sccm-owned/manifest.json

@@ -0,0 +1,38 @@
+{
+  "sccmManifestVersion": 1,
+  "contractState": "proposedPending318And319",
+  "proposalOnly": true,
+  "syntheticFixture": true,
+  "scenario": "co-management-sccm-owned",
+  "workflowFamily": "coManagement",
+  "bundle": {
+    "bundleId": "sccm-326-co-management-sccm-owned",
+    "captureHost": "LAB-CLIENT-01",
+    "role": "client",
+    "siteCode": "LAB"
+  },
+  "artifacts": [
+    {
+      "artifactId": "co-sccm-owner-current",
+      "role": "client",
+      "logicalArtifactId": "client-co-management",
+      "sourceName": "CoManagementHandler.log",
+      "catalogState": "admitted",
+      "parserEligible": true,
+      "captureState": "captured",
+      "relativePath": "evidence/client-co-management/current/CoManagementHandler.log",
+      "sanitizedSourcePath": "SYNTHETIC://client/management/co-management-sccm-owned/CoManagementHandler.log",
+      "pathFingerprint": "safe:path:326:co-sccm-owner",
+      "sourceVersion": "5.00.TEST.3260",
+      "encoding": "utf-8",
+      "rotation": {
+        "kind": "current",
+        "fragmentComplete": true
+      },
+      "collectionLimit": {
+        "capped": false,
+        "limitBytes": null
+      }
+    }
+  ]
+}

crates/cmtraceopen-parser/tests/fixtures/sccm/client/management/co-management-transitioning/evidence/client-co-management/current/CoManagementHandler.log

@@ -0,0 +1 @@
+<![LOG[SYNTHETIC FIXTURE Workload=Scripts Ownership=SharedOrTransitioning OwnershipEpochId=OWN-326-TRANSITION-1 Disposition=Transitioning Terminal=false]LOG]!><time="10:02:00.000+000" date="07-30-2026" component="CoManagementHandler" context="" type="1" thread="326" file="">

crates/cmtraceopen-parser/tests/fixtures/sccm/client/management/co-management-transitioning/expected.json

@@ -0,0 +1,40 @@
+{
+  "contractState": "proposedPending318And319",
+  "scenario": "co-management-transitioning",
+  "workflow": "coManagement",
+  "extractionProfile": {
+    "id": "sccm-client-co-management-5.00.test-v1",
+    "versionPrefix": "5.00.TEST.",
+    "selectionState": "selected"
+  },
+  "ownership": {
+    "classification": "SharedOrTransitioning",
+    "confidence": "medium",
+    "terminalHandoff": false,
+    "workload": "Scripts",
+    "evidence": [
+      {
+        "artifactId": "co-transition-owner-current",
+        "startLine": 1,
+        "endLine": 1
+      }
+    ],
+    "coverageGapArtifactIds": []
+  },
+  "coverage": [
+    {
+      "artifactId": "co-transition-owner-current",
+      "logicalArtifactId": "client-co-management",
+      "state": "captured"
+    }
+  ],
+  "transactions": [],
+  "sourceLocalObservations": [],
+  "findings": [],
+  "prohibitedClaims": [
+    "time alone proves causality",
+    "Intune handoff is an Intune failure",
+    "unsupported Software Center source is parsed",
+    "missing coverage proves success or failure"
+  ]
+}

crates/cmtraceopen-parser/tests/fixtures/sccm/client/management/co-management-transitioning/manifest.json

@@ -0,0 +1,38 @@
+{
+  "sccmManifestVersion": 1,
+  "contractState": "proposedPending318And319",
+  "proposalOnly": true,
+  "syntheticFixture": true,
+  "scenario": "co-management-transitioning",
+  "workflowFamily": "coManagement",
+  "bundle": {
+    "bundleId": "sccm-326-co-management-transitioning",
+    "captureHost": "LAB-CLIENT-01",
+    "role": "client",
+    "siteCode": "LAB"
+  },
+  "artifacts": [
+    {
+      "artifactId": "co-transition-owner-current",
+      "role": "client",
+      "logicalArtifactId": "client-co-management",
+      "sourceName": "CoManagementHandler.log",
+      "catalogState": "admitted",
+      "parserEligible": true,
+      "captureState": "captured",
+      "relativePath": "evidence/client-co-management/current/CoManagementHandler.log",
+      "sanitizedSourcePath": "SYNTHETIC://client/management/co-management-transitioning/CoManagementHandler.log",
+      "pathFingerprint": "safe:path:326:co-transition-owner",
+      "sourceVersion": "5.00.TEST.3260",
+      "encoding": "utf-8",
+      "rotation": {
+        "kind": "current",
+        "fragmentComplete": true
+      },
+      "collectionLimit": {
+        "capped": false,
+        "limitBytes": null
+      }
+    }
+  ]
+}

crates/cmtraceopen-parser/tests/fixtures/sccm/client/management/co-management-unknown/expected.json

@@ -0,0 +1,47 @@
+{
+  "contractState": "proposedPending318And319",
+  "scenario": "co-management-unknown",
+  "workflow": "coManagement",
+  "extractionProfile": {
+    "id": "sccm-client-co-management-5.00.test-v1",
+    "versionPrefix": "5.00.TEST.",
+    "selectionState": "selected"
+  },
+  "ownership": {
+    "classification": "UnknownOwnership",
+    "confidence": "low",
+    "terminalHandoff": false,
+    "workload": "Scripts",
+    "evidence": [],
+    "coverageGapArtifactIds": [
+      "co-unknown-owner-absent"
+    ]
+  },
+  "coverage": [
+    {
+      "artifactId": "co-unknown-owner-absent",
+      "logicalArtifactId": "client-co-management",
+      "state": "absent"
+    }
+  ],
+  "transactions": [],
+  "sourceLocalObservations": [
+    {
+      "observationId": "co-unknown-owner-coverage",
+      "kind": "coverageGap",
+      "claim": "Ownership remains unknown because the bounded co-management artifact is absent.",
+      "confidenceCeiling": "low",
+      "correlationEligible": false,
+      "artifactIds": [
+        "co-unknown-owner-absent"
+      ]
+    }
+  ],
+  "findings": [],
+  "prohibitedClaims": [
+    "time alone proves causality",
+    "Intune handoff is an Intune failure",
+    "unsupported Software Center source is parsed",
+    "missing coverage proves success or failure"
+  ]
+}

crates/cmtraceopen-parser/tests/fixtures/sccm/client/management/co-management-unknown/manifest.json

@@ -0,0 +1,38 @@
+{
+  "sccmManifestVersion": 1,
+  "contractState": "proposedPending318And319",
+  "proposalOnly": true,
+  "syntheticFixture": true,
+  "scenario": "co-management-unknown",
+  "workflowFamily": "coManagement",
+  "bundle": {
+    "bundleId": "sccm-326-co-management-unknown",
+    "captureHost": "LAB-CLIENT-01",
+    "role": "client",
+    "siteCode": "LAB"
+  },
+  "artifacts": [
+    {
+      "artifactId": "co-unknown-owner-absent",
+      "role": "client",
+      "logicalArtifactId": "client-co-management",
+      "sourceName": "CoManagementHandler.log",
+      "catalogState": "admitted",
+      "parserEligible": true,
+      "captureState": "absent",
+      "relativePath": null,
+      "sanitizedSourcePath": null,
+      "pathFingerprint": null,
+      "sourceVersion": null,
+      "encoding": null,
+      "rotation": {
+        "kind": "current",
+        "fragmentComplete": false
+      },
+      "collectionLimit": {
+        "capped": false,
+        "limitBytes": null
+      }
+    }
+  ]
+}

crates/cmtraceopen-parser/tests/fixtures/sccm/client/management/mixed-unrelated/evidence/client-co-management/current/CoManagementHandler.log

@@ -0,0 +1,2 @@
+<![LOG[SYNTHETIC FIXTURE Workload=Scripts Ownership=SccmOwned OwnershipEpochId=OWN-326-MIXED Disposition=Owned Terminal=true]LOG]!><time="14:00:00.000+000" date="07-30-2026" component="CoManagementHandler" context="" type="1" thread="326" file="">
+<![LOG[SYNTHETIC FIXTURE Workload=Scripts Ownership=IntuneOwned OwnershipEpochId=OWN-326-MIXED Disposition=Handoff Terminal=true]LOG]!><time="14:00:00.000+2500" date="07-30-2026" component="CoManagementHandler" context="" type="2" thread="326" file="">

crates/cmtraceopen-parser/tests/fixtures/sccm/client/management/mixed-unrelated/evidence/client-notification/current/CcmNotificationAgent.log

@@ -0,0 +1 @@
+<![LOG[SYNTHETIC FIXTURE NotificationId=NOTIFY-326-INVALID ChannelId=CHANNEL-326-CLIENT ResourceHandle=safe:resource-326-notification-invalid Phase=Acknowledge Disposition=Acknowledged Terminal=true]LOG]!><time="14:00:00.000+2500" date="07-30-2026" component="CcmNotificationAgent" context="" type="1" thread="326" file="">

crates/cmtraceopen-parser/tests/fixtures/sccm/client/management/mixed-unrelated/evidence/client-scripts/root-a/current/Scripts.log

@@ -0,0 +1 @@
+<![LOG[SYNTHETIC FIXTURE UnkeyedCandidate=alpha SameMinute=true Disposition=Succeeded Terminal=true]LOG]!><time="14:00:00.000+000" date="07-30-2026" component="Scripts" context="" type="1" thread="326" file="">

crates/cmtraceopen-parser/tests/fixtures/sccm/client/management/mixed-unrelated/evidence/client-scripts/root-b/current/Scripts.log

@@ -0,0 +1 @@
+<![LOG[SYNTHETIC FIXTURE UnkeyedCandidate=beta SameMinute=true Disposition=Failed Terminal=true Signal=0x80004005]LOG]!><time="14:00:00.000+000" date="07-30-2026" component="Scripts" context="" type="3" thread="326" file="">