shankar0123 15fedbaa06 test(scheduler): SCALE-001 — assert claim cap via non-Pending count, not Running ...

Sprint 2's TestProcessPendingJobs_RespectsClaimLimit asserted
that exactly 3 jobs sat in JobStatusRunning after a 10-row
ProcessPendingJobs sweep with SetClaimLimit(3). The CI run
landed 'running-job count = 0; want 3.'

Root cause: the mock's ClaimPendingJobs flips Pending → Running
on the 3 claimed rows (atomic-claim semantics). processJob then
calls renewalService.ProcessRenewalJob, which fails on the
mock cert-repo's not-found error and calls failJob → which
transitions the row from Running → Failed. By the time the
test assertion runs, no row is still in Running.

The load-bearing SCALE-001 invariant is 'the cap STOPPED at 3.'
Whether the 3 claimed rows ended up Running, Failed, or
Completed is irrelevant to the cap — what matters is that 7
rows STAYED in Pending for the next tick.

Fix: count non-Pending (= claimed) and still-Pending (= 10
minus claimed) separately. Assert claimed=3 and stillPending=7.
LastClaimLimit=3 assertion (already passing in the failed run)
also stays as the seam-propagation pin.

This is a test-fix only — the SCALE-001 production behavior
landed correctly in 037876f and is proven by the CI log line
'count=3 claim_limit=3'.

2026-05-16 04:15:51 +00:00

..

auth

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

acme_authz.go

refactor(service/acme): split into sibling files — Option B (Phase 9, 9 of N — partial)

2026-05-14 09:58:46 +00:00

acme_challenges.go

refactor(service/acme): split into sibling files — Option B (Phase 9, 9 of N — partial)

2026-05-14 09:58:46 +00:00

acme_gc.go

refactor(service/acme): split into sibling files — Option B (Phase 9, 9 of N — partial)

2026-05-14 09:58:46 +00:00

acme_nonces.go

refactor(service/acme): split into sibling files — Option B (Phase 9, 9 of N — partial)

2026-05-14 09:58:46 +00:00

acme_orders.go

refactor(service/acme): extract orders concern to sibling file (Phase 9, 9b — deferred half of Sprint 9)

2026-05-14 10:06:06 +00:00

acme_phase4_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

acme_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

acme.go

refactor(service/acme): extract orders concern to sibling file (Phase 9, 9b — deferred half of Sprint 9)

2026-05-14 10:06:06 +00:00

agent_group_test.go

fix(repo,service): SCALE-002 — push pagination into SQL for target/issuer/team/agent_group

2026-05-16 04:01:45 +00:00

agent_group.go

fix(repo,service): SCALE-002 — push pagination into SQL for target/issuer/team/agent_group

2026-05-16 04:01:45 +00:00

agent_retire_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

agent_retire.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

agent_round_out_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

agent_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

agent.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

approval_metrics.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

approval_test.go

auth-bundle-1 Phase 9 + 10: approval-bypass closure + RBAC GUI

2026-05-09 21:03:59 +00:00

approval.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

atomic_audit_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

audit_redact_test.go

chore(fmt): repo-wide gofmt -w sweep — close drift surfaced by ci-pipeline-cleanup Phase 4

2026-04-30 22:33:57 +00:00

audit_redact.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

audit_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

audit.go

feat(audit): close P-H2 — server-side since / until time-range filters

2026-05-14 19:35:51 +00:00

bulk_reassignment_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

bulk_reassignment.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

bulk_renewal_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

bulk_renewal.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

bulk_revocation_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

bulk_revocation.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

ca_operations_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

ca_operations.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

certificate_nil_safety_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

certificate_round_out_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

certificate_test.go

cli: promote --force on renew + require --reason on revoke (closes P3-1, P3-2)

2026-05-05 19:49:34 +00:00

certificate.go

fix(agent,service): SEC-002 — validate certificate_id shape + contain key path

2026-05-16 03:31:59 +00:00

cloud_discovery_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

cloud_discovery.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

concurrent_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

config_helpers_test.go

test: comprehensive test gap closure across 24 packages

2026-04-09 23:09:40 -04:00

config_helpers.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

context_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

coverage_extras_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

crl_cache_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

crl_cache.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

crypto_validation_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

crypto_validation.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

csr_renewal_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

deploy_counters_test.go

feat(metrics): per-target-type deploy counters wired into /metrics/prometheus

2026-04-30 15:25:38 +00:00

deploy_counters.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

deployment_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

deployment.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

digest_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

digest.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

discovery_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

discovery.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

est_audit_actions_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

est_audit_actions.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

est_counters.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

est_profile_counter_isolation_test.go

EST RFC 7030 hardening master bundle Phases 5-7: end-to-end serverkeygen

2026-04-29 23:57:45 +00:00

est_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

est.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

expiry_alert_metrics.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

export_audit_actions.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

export_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

export.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

health_check_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

health_check.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

intermediate_ca_metrics.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

intermediate_ca_test.go

service: 10 IntermediateCAService tests + in-memory fake repo (Rank 8 commit 2.5)

2026-05-04 02:14:24 +00:00

intermediate_ca.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

issuance_metrics_test.go

metrics: gofmt issuance_metrics_test.go — fix CI

2026-05-02 01:27:33 +00:00

issuance_metrics.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

issuer_adapter_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

issuer_adapter.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

issuer_bootstrap_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

issuer_registry_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

issuer_registry.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

issuer_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

issuer.go

fix(repo,service): SCALE-002 — push pagination into SQL for target/issuer/team/agent_group

2026-05-16 04:01:45 +00:00

job_concurrency_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

job_offline_agent_reaper_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

job_test.go

test(scheduler): SCALE-001 — assert claim cap via non-Pending count, not Running

2026-05-16 04:15:51 +00:00

job.go

fix(scheduler): SCALE-001 — cap ClaimPendingJobs per-tick (default 1000)

2026-05-16 04:00:49 +00:00

m11c_crypto_enforcement_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

network_scan_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

network_scan.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

notification_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

notification.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

ocsp_counters_test.go

test(service): coverage uplift for production hardening II + adjacent helpers (R-CI-extended floor)

2026-04-30 06:22:06 +00:00

ocsp_counters.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

ocsp_nonce_test.go

feat(ocsp): RFC 6960 §4.4.1 nonce extension support — echo client nonce in response, reject malformed

2026-04-30 04:55:06 +00:00

ocsp_nonce.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

ocsp_response_cache_real_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

ocsp_response_cache_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

ocsp_response_cache.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

owner_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

owner.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

policy_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

policy.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

profile_approval_test.go

auth-bundle-1 Phase 9 + 10: approval-bypass closure + RBAC GUI

2026-05-09 21:03:59 +00:00

profile_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

profile.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

renewal_expiry_alerts_test.go

2026-05-05 18:18:29 +00:00

renewal_policy_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

renewal_policy.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

renewal_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

renewal.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

revocation_svc_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

revocation_svc.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

revocation_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

scep_intune_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

scep_must_staple_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

scep_probe_persist_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

scep_probe_test.go

feat(scep): SCEP probe in network scanner for fleet-readiness assessment

2026-04-29 18:51:57 +00:00

scep_probe.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

scep_test.go

feat(scep): RenewalReq + GetCertInitial + ChromeOS E2E + caps + must-staple

2026-04-29 13:16:09 +00:00

scep.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

shortlived_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

stats_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

stats.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

target_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

target.go

fix(repo,service): SCALE-002 — push pagination into SQL for target/issuer/team/agent_group

2026-05-16 04:01:45 +00:00

team_test.go

fix(repo,service): SCALE-002 — push pagination into SQL for target/issuer/team/agent_group

2026-05-16 04:01:45 +00:00

team.go

fix(repo,service): SCALE-002 — push pagination into SQL for target/issuer/team/agent_group

2026-05-16 04:01:45 +00:00

testutil_test.go

fix(repo,service): SCALE-002 — push pagination into SQL for target/issuer/team/agent_group

2026-05-16 04:01:45 +00:00

vault_renewal_metrics.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00

verification_test.go

chore: rename Go module path to github.com/certctl-io/certctl

2026-05-04 00:30:29 +00:00

verification.go

legal: addlicense headers + normalize legacy variants (Phase 0 RED-4)

2026-05-13 21:23:35 +00:00