Skip to content

docs(slopclean): keep injected-clock auth tests and require human review of auth cuts #276

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
altaywtf merged 2 commits into from
Oct 21, 2026
Merged

docs(slopclean): keep injected-clock auth tests and require human review of auth cuts #276

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
ba61aba
docs(slopclean): keep injected-clock auth tests and require human rev…
altaywtf Oct 21, 2026
e766a58
docs(slopclean): scope clock retention to the only proof of a contract
altaywtf Oct 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 7 additions & 3 deletions skills/slopclean/references/tests.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,8 @@ when a contract breaks and survives refactors
coverage from the repo's command, per-file results. Failing tests are
defect candidates, not deletions.
3. **Read by owner.** Split along production owners; read each test with its
owner.
owner. Across a whole suite, give each file two independent readers and
cut only where both agree.
4. **Mark each test:** R (retain: the contract and the bug it catches), F (fix
a vacuous assertion), C (consolidate: name the absorbing keeper), D (delete:
name the remaining proof, or why no contract exists). Missing evidence, keep
Expand All @@ -44,11 +45,14 @@ when a contract breaks and survives refactors
instead.
6. **Prove keepers:** break the owner once per moved contract, confirm the
keeper fails, restore. Then have a different model review deleted coverage
against keepers (slopguard).
against keepers (slopguard). A human reviews every cut that touches auth,
permissions, or credentials before merge.

Keep tests that guard a public API, protocol, config, migration, storage,
security, platform, or release contract, even if they look like source
checks. Static or slow is not a reason.
checks. Static or slow is not a reason. An injected clock doesn't make a
test a timing test: the only proof of an auth expiry, rotation, or lease
timeout stays.

Report baseline and final counts, lines (production and test apart), and
coverage; what was removed; look-alikes kept and why; seams removed;
Expand Down