From ba61aba620ea7ac3a36568e67bfe1a64c20c0207 Mon Sep 17 00:00:00 2001 From: Altay Date: Wed, 21 Oct 2026 08:49:39 +0300 Subject: [PATCH 1/2] docs(slopclean): keep injected-clock auth tests and require human review of auth cuts --- skills/slopclean/references/tests.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/skills/slopclean/references/tests.md b/skills/slopclean/references/tests.md index 3526e7ce..ddd63a8e 100644 --- a/skills/slopclean/references/tests.md +++ b/skills/slopclean/references/tests.md @@ -33,7 +33,8 @@ when a contract breaks and survives refactors coverage from the repo's command, per-file results. Failing tests are defect candidates, not deletions. 3. **Read by owner.** Split along production owners; read each test with its - owner. + owner. Across a whole suite, give each file two independent readers and + cut only where both agree. 4. **Mark each test:** R (retain: the contract and the bug it catches), F (fix a vacuous assertion), C (consolidate: name the absorbing keeper), D (delete: name the remaining proof, or why no contract exists). Missing evidence, keep @@ -44,11 +45,14 @@ when a contract breaks and survives refactors instead. 6. **Prove keepers:** break the owner once per moved contract, confirm the keeper fails, restore. Then have a different model review deleted coverage - against keepers (slopguard). + against keepers (slopguard). A human reviews every cut that touches auth, + permissions, or credentials before merge. Keep tests that guard a public API, protocol, config, migration, storage, security, platform, or release contract, even if they look like source -checks. Static or slow is not a reason. +checks. Static or slow is not a reason. A test on an injected clock is a +contract test, not a timing test: auth expiry, rotation, and lease timeouts +stay. Report baseline and final counts, lines (production and test apart), and coverage; what was removed; look-alikes kept and why; seams removed; From e766a58a41708a3ecbad2beb95c321b25b17d1a3 Mon Sep 17 00:00:00 2001 From: Altay Date: Wed, 21 Oct 2026 08:55:04 +0300 Subject: [PATCH 2/2] docs(slopclean): scope clock retention to the only proof of a contract --- skills/slopclean/references/tests.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/skills/slopclean/references/tests.md b/skills/slopclean/references/tests.md index ddd63a8e..374fefd8 100644 --- a/skills/slopclean/references/tests.md +++ b/skills/slopclean/references/tests.md @@ -50,9 +50,9 @@ when a contract breaks and survives refactors Keep tests that guard a public API, protocol, config, migration, storage, security, platform, or release contract, even if they look like source -checks. Static or slow is not a reason. A test on an injected clock is a -contract test, not a timing test: auth expiry, rotation, and lease timeouts -stay. +checks. Static or slow is not a reason. An injected clock doesn't make a +test a timing test: the only proof of an auth expiry, rotation, or lease +timeout stays. Report baseline and final counts, lines (production and test apart), and coverage; what was removed; look-alikes kept and why; seams removed;