From b614fe003fdeb5a2efbf470fbdd840ee717db93d Mon Sep 17 00:00:00 2001 From: Kalvin Chau Date: Wed, 4 Nov 2026 10:11:04 -0800 Subject: [PATCH] test(agents): fix unauthorized workflow mention fixture use a non-owner signer with workflow attribution claims to exercise rejection under the restored owner authorization policy. Co-authored-by: OpenAI Codex Signed-off-by: Kalvin Chau --- src/features/agent-harness/kit.test.ts | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/src/features/agent-harness/kit.test.ts b/src/features/agent-harness/kit.test.ts index 1b0da28f0c..a672176a85 100644 --- a/src/features/agent-harness/kit.test.ts +++ b/src/features/agent-harness/kit.test.ts @@ -176,9 +176,12 @@ describe("harnessKit.conversation", () => { await kit.conversation(delivery({ type: "mention", event }), "thread"), ).toBeUndefined(); const workflow = message("3", "@Ampy go", { + pubkey: mallory, tags: [ ["h", channel], - ["buzz:workflow", "w"], + ["buzz:workflow", "true"], + ["buzz:workflow-owner", alice], + ["buzz:workflow-mention", self], ], }); expect(