skz-sloptrap/tests/README.md

Test Scenarios

This directory contains cases that stress Sloptrap's hardening and deployment flow. Each subdirectory mimics a user repository and focuses on a single class of behaviour. Use run_tests.sh to execute the automated checks with stubbed tooling.

Current scenarios:

• mount_injection/ — exercises .sloptrapignore entries with , and = to ensure mount escape characters remain escaped and forces build_if_missing to execute the Codex download/build path.
• root_target/ — ensures attempts to mask the project root are rejected.
• symlink_escape/ — confirms symlink targets resolving outside the project are blocked.
• manifest_injection/ — ensures disallowed make.* overrides abort parsing.
• helper_symlink/ — ensures .sloptrap-ignores cannot be a symlink to directories outside the project.
• secret_mask/ — verifies masked files remain hidden even when Sloptrap remaps the workspace mount.