Finished `test` profile [unoptimized + debuginfo] target(s) in 0.09s Running unittests src/lib.rs (target/debug/deps/refineid_apdu-1c9f3fee20283935) running 49 tests test command::tests::apdu_class_bytes_are_distinct ... ok test build_version_tests::build_version_extends_the_crate_version ... ok test command::tests::case_1_is_header_only ... ok test command::tests::case_2_appends_le ... ok test command::tests::case_3_appends_lc_and_data ... ok test command::tests::case_4_appends_lc_data_and_le ... ok test command::tests::command_chain_of_a_short_field_is_a_single_case_4 ... ok test command::tests::command_chain_rejects_empty_data ... ok test command::tests::command_chain_splits_a_large_field_across_the_chaining_class ... ok test command::tests::credential_body_boundaries_are_enforced ... ok test command::tests::credential_body_error_format_does_not_leak_candidate_length ... ok test command::tests::credential_body_takes_custody_of_a_block ... ok test command::tests::credential_capacity_covers_a_block_pair_and_nothing_more ... ok test command::tests::credential_command_assembles_a_case_3_wire_shape ... ok test command::tests::credential_types_debug_is_always_redacted ... ok test command::tests::data_field_boundaries_are_enforced ... ok test command::tests::protected_parts_assemble_the_case_4_wire ... ok test command::tests::protected_parts_boundaries_are_enforced ... ok test command::tests::wrong_le_correction_requires_builder_opt_in ... ok test command::tests::wrong_le_opt_in_is_unreachable_for_non_case_2_shapes ... ok test iso7816::tests::absolute_path_boundaries_are_enforced ... ok test iso7816::tests::get_response_matches_the_specified_wire_and_permits_one_correction ... ok test iso7816::tests::direct_offset_boundaries_are_enforced ... ok test iso7816::tests::read_binary_by_sfi_matches_the_specified_wire ... ok test iso7816::tests::read_binary_direct_matches_the_specified_wire ... ok test iso7816::tests::select_by_aid_matches_the_specified_wire ... ok test iso7816::tests::select_ef_matches_the_specified_wire ... ok test iso7816::tests::select_file_covers_every_target_and_response_mode ... ok test iso7816::tests::select_file_empty_data_form_is_header_only ... ok test primitives::tests::aid_accepts_the_valid_length_range ... ok test primitives::tests::aid_rejects_out_of_range_lengths ... ok test primitives::tests::file_id_round_trips_its_bytes ... ok test primitives::tests::sfi_accepts_the_valid_range ... ok test primitives::tests::sfi_rejects_zero_and_overflow ... ok test public_contract_tests::credential_types_preserve_ownership_contracts ... ok test public_contract_tests::public_commands_are_debuggable_but_never_clonable ... ok test status_word::tests::display_includes_raw_value_and_human_label ... ok test status_word::tests::from_bytes_matches_from_u16 ... ok test status_word::tests::pin_incorrect_carries_retries ... ok test status_word::tests::pin_retries_rejects_out_of_nibble_range ... ok test status_word::tests::success_round_trips ... ok test status_word::tests::unknown_sw_falls_through_to_other ... ok test status_word::tests::zero_counter_is_distinct_from_authentication_blocked ... ok test transport::tests::credential_transmit_consumes_the_command ... ok test transport::tests::outcome_projects_fault_kinds_and_responses ... ok test transport::tests::response_debug_redacts_the_body ... ok test transport::tests::response_status_helpers_project_the_typed_word ... ok test transport::tests::typed_transmit_drives_a_script ... ok test status_word::tests::every_status_word_value_round_trips_through_u16 ... ok test result: ok. 49 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/public_api_contracts.rs (target/debug/deps/public_api_contracts-bb5fbe87bfe4816d) running 1 test Checking refineid-apdu-tests v0.0.0 (~/src/refineid-core/target/tests/trybuild/refineid-apdu) Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.04s test tests/ui/no_raw_command_from_bytes.rs ... ok test tests/ui/no_raw_credential_bytes.rs ... ok test tests/ui/no_raw_credential_clone.rs ... ok test sensitive_values_have_no_public_raw_access ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s Running unittests src/lib.rs (target/debug/deps/refineid_atr-74f1a7aabb0205a5) running 10 tests test tests::a_corrupt_tck_is_rejected ... ok test tests::minimal_atr_ts_t0_only ... ok test tests::parses_gemalto_multiapp_v4_2 ... ok test tests::parses_thales_multiapp_v5_0_compact_tlv_entries ... ok test tests::rejects_invalid_convention ... ok test tests::rejects_too_long ... ok test tests::rejects_too_short ... ok test tests::ta1_decodes_iso_physical_values ... ok test tests::td1_t1_protocol_requires_tck ... ok test tests::typed_data_objects_decode_fineid_historical_bytes ... ok test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/refineid_auth-f575fe37c1f8f0fc) running 46 tests test activation::tests::activation_needs_reports_correctly ... ok test activation::tests::activation_code_validation_enforces_scheme_lengths ... ok test activation::tests::read_pin_change_record_handles_non_9000_as_unreadable ... ok test activation::tests::read_pin_change_record_propagates_transport_error ... ok test activation::tests::read_pin_change_record_reports_unchanged_and_changed ... ok test activation::tests::read_puk_status_handles_authentication_blocked_as_locked ... ok test activation::tests::read_puk_status_handles_missing_or_corrupt_tlv_as_no_info ... ok test activation::tests::read_puk_status_propagates_transport_error ... ok test activation::tests::read_puk_status_handles_other_status_word ... ok test activation::tests::scheme_resolution_follows_cutover ... ok test credentials::tests::debug_is_always_redacted ... ok test credentials::tests::errors_never_retain_the_rejected_byte ... ok test credentials::tests::display_is_always_shape_only ... ok test credentials::tests::pin1_boundary_lengths_are_enforced ... ok test credentials::tests::pin2_boundary_lengths_are_enforced ... ok test credentials::tests::puk_boundary_lengths_are_enforced ... ok test credentials::tests::role_specific_minimums_are_enforced ... ok test credentials::tests::role_types_reconstruct_valid_input ... ok test credentials::tests::unvalidated_storage_is_zeroizable ... ok test manage::tests::citizen_change_pin1_presents_current_then_new_padded_blocks ... ok test manage::tests::citizen_puk_probe_falls_back_to_container_on_no_info_verify ... ok test manage::tests::citizen_puk_probe_falls_back_to_container_on_unsupported_verify ... ok test manage::tests::citizen_puk_probe_propagates_transport_error ... ok test manage::tests::citizen_puk_probe_wire_shape_is_case_1_without_data ... ok test manage::tests::citizen_unblock_pin1_presents_puk_then_new ... ok test manage::tests::manage_classifier_covers_the_outcomes ... ok test manage::tests::organizational_change_pin1_presents_typed_length_blocks ... ok test manage::tests::organizational_change_refuses_an_overlong_new_pin_before_any_command ... ok test manage::tests::organizational_unblock_stops_when_the_puk_is_refused ... ok test manage::tests::organizational_unblock_verifies_the_puk_then_resets_new_only ... ok test manage::tests::probe_credential_health_propagates_puk_transport_error ... ok test public_contract_tests::sensitive_public_types_preserve_ownership_contracts ... ok test retry_risk::tests::a_reusable_cache_requires_a_pristine_pin1 ... ok test retry_risk::tests::consumer_authentication_depends_only_on_the_pin1_floor ... ok test retry_risk::tests::qualified_signature_uses_the_same_consumer_retry_floor ... ok test retry_risk::tests::the_five_attempt_ladder_is_total ... ok test retry_risk::tests::the_floors_follow_the_ladder ... ok test verify::tests::a_two_block_citizen_body_pads_each_block_to_the_stored_length ... ok test verify::tests::citizen_block_pads_and_organizational_block_stays_typed_length ... ok test verify::tests::citizen_verify_ships_the_padded_block_under_the_citizen_reference ... ok test verify::tests::organizational_verify_ships_the_bare_typed_digits_under_the_org_reference ... ok test verify::tests::scheme_references_differ_between_citizen_and_organizational ... ok test verify::tests::slot_references_are_distinct ... ok test verify::tests::status_classifier_covers_the_states ... ok test verify::tests::the_counter_safe_probe_sends_only_the_header ... ok test verify::tests::verify_classifier_covers_the_outcomes ... ok test result: ok. 46 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/manage_flow.rs (target/debug/deps/manage_flow-940116e7961e210a) running 2 tests test change_pin1_resolves_the_citizen_numbering_then_updates ... ok test unblock_pin1_resolves_organizational_then_sends_the_two_command_flow ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/public_api_contracts.rs (target/debug/deps/public_api_contracts-539ca441bc1c9f4b) running 1 test Checking refineid-auth-tests v0.0.0 (~/src/refineid-core/target/tests/trybuild/refineid-auth) Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.04s test tests/ui/no_raw_pin1.rs ... ok test tests/ui/no_raw_pin2.rs ... ok test sensitive_values_have_no_public_raw_access ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.24s Running tests/verify_flow.rs (target/debug/deps/verify_flow-7cc1e72eb97b3886) running 7 tests test a_wrong_pin_reports_the_remaining_retries ... ok test a_blocked_slot_reports_locked ... ok test organizational_verify_sends_the_typed_length_block_under_the_org_reference ... ok test resolution_picks_organizational_when_citizen_is_not_found ... ok test the_status_probe_uses_the_plain_path_and_sends_no_data ... ok test verify_pin2_targets_the_qualified_signature_reference ... ok test verify_pin1_ships_the_padded_block_as_a_credential_command ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/refineid_ber-3d867a32a64b2cdd) running 17 tests test tests::encoder_rejects_lengths_above_the_four_byte_form ... ok test tests::any_then_expect_round_trips ... ok test tests::iter_children_walks_heterogeneous_tags ... ok test tests::iterates_constructed_children ... ok test tests::iterator_stops_after_a_malformed_child ... ok test tests::rejects_a_malformed_two_byte_tag ... ok test tests::rejects_a_one_byte_tag_that_is_a_multi_byte_leader ... ok test tests::rejects_a_three_octet_tag ... ok test tests::rejects_empty_input ... ok test tests::rejects_length_forms_above_four_bytes ... ok test tests::rejects_the_indefinite_length_marker ... ok test tests::rejects_truncated_value ... ok test tests::short_form_length_round_trips ... ok test tests::truncated_long_form_length_octets_are_rejected ... ok test tests::every_long_form_round_trips ... ok test tests::two_byte_tag_round_trips ... ok test tests::typed_parse_matches_and_rejects_tags ... ok test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (target/debug/deps/refineid_cms-9bc7477df35c6f28) running 89 tests test container::tests::mac_carries_algorithm_at_type_level ... ok test container::tests::ciphertext_carries_algorithm_at_type_level ... ok test container::tests::nonce_length_is_part_of_the_type ... ok test container::tests::plaintext_carries_algorithm_at_type_level ... ok test container::tests::plaintext_debug_and_display_do_not_leak_bytes ... ok test container::tests::plaintext_display_does_not_leak_bytes ... ok test container::tests::signature_carries_algorithm ... ok test ecdsa::tests::encode_der_integer_high_bit_set_pads_with_zero ... ok test ecdsa::tests::encode_der_integer_strips_leading_zeros ... ok test ecdsa::tests::encode_der_integer_zero_emits_single_byte ... ok test ecdsa::tests::encode_der_length_one_byte_long_form ... ok test ecdsa::tests::encode_der_length_short_form_under_128 ... ok test ecdsa::tests::encode_der_length_two_byte_long_form ... ok test ecdsa::tests::into_der_round_trips_through_parser ... ok test ecdsa::tests::xml_raw_signature_converts_to_der_components ... ok test ecdsa::tests::xml_raw_signature_rejects_missing_or_unequal_components ... ok test oid::tests::accepts_three_arc_dn_oid ... ok test oid::tests::const_new_byte_equality ... ok test oid::tests::display_ad_ocsp ... ok test oid::tests::display_aia ... ok test oid::tests::display_basic_constraints ... ok test oid::tests::display_dn_common_name ... ok test oid::tests::display_dn_country_name ... ok test oid::tests::display_dn_given_name ... ok test oid::tests::display_ec_public_key ... ok test oid::tests::display_ecdsa_signature ... ok test oid::tests::display_icao_ml_signer ... ok test oid::tests::display_key_usage ... ok test oid::tests::display_rsa_encryption ... ok test oid::tests::display_rsa_signature ... ok test oid::tests::display_secp256r1 ... ok test oid::tests::display_secp384r1 ... ok test oid::tests::partialeq_against_byte_slice ... ok test oid::tests::rejects_empty ... ok test oid::tests::rejects_unterminated_arc ... ok test rsa::tests::e_65537_canonical_form ... ok test rsa::tests::fixed_sha256_pss_rejects_other_salt_widths ... ok test rsa::tests::fixed_sha256_pss_encoding_verifies_and_detects_tampering ... ok test rsa::tests::placeholder_signpost ... ok test rsa::tests::rejects_even_exponent_at_construction ... ok test rsa::tests::rejects_even_modulus_at_construction ... ok test rsa::tests::rejects_exponent_below_three_at_construction ... ok test rsa::tests::rejects_leading_zero_modulus ... ok test rsa::tests::rejects_oversized_exponent_at_construction ... ok test rsa::tests::rejects_signature_size_mismatch ... ok test rsa::tests::rejects_too_small_modulus_at_construction ... ok test signed_data::tests::cms_error_display_strings ... ok test signed_data::tests::efsod_rejects_non_signeddata_contentinfo ... ok test signed_data::tests::hash_algorithm_digest_known_answers ... ok test signed_data::tests::hash_algorithm_from_oid_maps_sha2_only ... ok test signed_data::tests::hash_algorithm_label ... ok test signed_data::tests::lds_rejects_unsupported_hash_algorithm ... ok test signed_data::tests::owned_lds_security_object_rejects_garbage ... ok test signed_data::tests::owned_lds_security_object_roundtrips ... ok test signed_data::tests::owned_signed_data_rejects_garbage ... ok test signed_data::tests::owned_signed_data_roundtrips ... ok test signed_data::tests::parses_contentinfo_wrapped_rsa ... ok test signed_data::tests::parses_lds_security_object_directly ... ok test signed_data::tests::rejects_bytes_after_complete_cms_value ... ok test signed_data::tests::rejects_detached_signeddata ... ok test signed_data::tests::rejects_empty_input ... ok test signed_data::tests::rejects_empty_sequence ... ok test signed_data::tests::rejects_unknown_wrapper_tag ... ok test signed_data::tests::requires_exactly_one_signer_info ... ok test signed_data::tests::signed_attributes_require_unique_content_type_and_message_digest ... ok test signed_data::tests::signer_identifier_is_retained_for_certificate_selection ... ok test signed_data::tests::signer_info_without_signed_attrs ... ok test signed_data::tests::three_wrappings_decode_to_same_signeddata ... ok test signed_data::tests::verified_signed_data_exposes_lds_hashes ... ok test signed_data::tests::verified_signed_data_rejects_bad_signature ... ok test signed_data::tests::cms_error_display_wraps_crypto_errors ... ok test signed_data::tests::verify_rejects_mismatched_key_type ... ok test signed_data::tests::verify_rejects_signed_attributes_without_message_digest ... ok test signed_data::tests::verify_rejects_tampered_econtent ... ok test signed_data::tests::verify_rejects_unsupported_digest_algorithm ... ok test signed_data::tests::verify_rejects_unsupported_signature_algorithm ... ok test signed_data::tests::verify_ecdsa_with_signed_attrs ... ok test signed_data::tests::verify_rejects_wrong_rsa_key ... ok test signed_data::tests::verify_rsa_with_signed_attrs ... ok test signed_data::tests::verify_rsa_without_signed_attrs ... ok test x509::tests::datetime_ordering_matches_lex_order ... ok test x509::tests::parses_generalized_time ... ok test x509::tests::parses_minimal_v3_cert_without_extensions ... ok test x509::tests::path_constraints_accept_dvv_explicit_false_without_ca_authority ... ok test x509::tests::path_constraints_reject_noncanonical_true ... ok test x509::tests::path_constraints_reject_path_length_after_false ... ok test x509::tests::rejects_garbage_time ... ok test x509::tests::utc_time_yy_below_50_is_2000s ... ok test signed_data::tests::verify_rejects_wrong_ecdsa_key ... ok test result: ok. 89 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.36s Running unittests src/lib.rs (target/debug/deps/refineid_digest-341882521ff6e78e) running 15 tests test tests::hash_alg_digest_len_matches_named_constants ... ok test tests::digest_equality_is_by_value ... ok test tests::hash_alg_parses_names_case_insensitively ... ok test tests::hash_alg_rejects_unknown_names ... ok test tests::sha1_from_bytes_round_trips_through_accessors ... ok test tests::sha1_of_abc_matches_fips_known_answer ... ok test tests::sha224_from_bytes_round_trips_through_accessors ... ok test tests::sha224_of_abc_matches_fips_known_answer ... ok test tests::sha256_from_bytes_round_trips_through_accessors ... ok test tests::sha256_of_empty_matches_fips_known_answer ... ok test tests::sha256_of_abc_matches_fips_known_answer ... ok test tests::sha384_from_bytes_round_trips_through_accessors ... ok test tests::sha384_of_abc_matches_fips_known_answer ... ok test tests::sha512_from_bytes_round_trips_through_accessors ... ok test tests::sha512_of_abc_matches_fips_known_answer ... ok test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/refineid_emrtd-e289cb52e465b7af) running 14 tests test inventory::tests::parses_ef_com_inventory ... ok test mrz::tests::parses_td1_mrz ... ok test passive::tests::debug_forms_redact_card_bytes ... ok test passive::tests::rejects_empty_anchor_set ... ok test passive::tests::rejects_tampered_signature_byte ... ok test passive::tests::authenticates_the_committed_fixture_end_to_end ... ok test passive::tests::rejects_truncated_security_object ... ok test passive::tests::rejects_wrong_mrz_bytes ... ok test portrait::tests::parses_and_validates_jpeg2000_portrait ... ok test portrait::tests::parses_and_validates_jpeg_portrait ... ok test passive::tests::rejects_wrong_face_bytes ... ok test reader::tests::decodes_short_and_extended_lengths ... ok test sfi::tests::sfi_masks_to_five_bits ... ok test sfi::tests::sfi_p1_sets_highest_bit ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (target/debug/deps/refineid_pace-813783531e778728) running 34 tests test can::tests::can_error_format_does_not_leak_candidate_length_or_offset ... ok test can::tests::debug_is_always_redacted ... ok test can::tests::structural_failures_are_typed ... ok test can::tests::every_six_digit_value_is_structurally_valid ... ok test can::tests::valid_input_is_reconstructed_once ... ok test commands::tests::general_authenticate_chaining_selects_the_class ... ok test commands::tests::mse_set_at_matches_the_specified_wire ... ok test crypto::brainpool_p384::tests::a_coordinate_at_the_prime_is_rejected ... ok test crypto::brainpool_p384::tests::generator_is_on_curve ... ok test crypto::brainpool_p384::tests::generator_round_trips_through_sec1 ... ok test crypto::brainpool_p384::tests::doubling_matches_addition ... ok test crypto::brainpool_p384::tests::negation_is_involutive ... ok test crypto::brainpool_p384::tests::prime_leading_byte_has_high_bit_set ... ok test crypto::brainpool_p384::tests::scalar_mul_is_homomorphic ... ok test crypto::brainpool_p384::tests::scalar_mul_small_values ... ok test crypto::symmetric::tests::cmac_matches_nist_vectors ... ok test crypto::symmetric::tests::ecb_matches_the_nist_vector ... ok test crypto::symmetric::tests::from_bytes_rejects_sentinel_keys ... ok test crypto::symmetric::tests::kdf_distinguishes_the_counters ... ok test handshake::tests::auth_token_wraps_the_oid_and_point ... ok test handshake::tests::mechanism_oid_body_is_ten_bytes ... ok test handshake::tests::mutual_authentication_rejects_a_tampered_token ... ok test handshake::tests::mutual_authentication_round_trips_against_a_peer ... ok test handshake::tests::nonce_lifts_to_a_zero_padded_scalar ... ok test handshake::tests::random_scalars_are_in_range ... ok test public_contract_tests::sensitive_public_types_preserve_ownership_contracts ... ok test secure_messaging::tests::decode_short_apdu_covers_every_case ... ok test secure_messaging::tests::padding_round_trips ... ok test secure_messaging::tests::protected_warning_body_is_still_unwrapped ... ok test secure_messaging::tests::round_trip_through_a_card_peer ... ok test secure_messaging::tests::tampered_authentication_tag_is_rejected ... ok test secure_messaging::tests::unprotected_response_is_refused ... ok test secure_messaging::tests::wrap_sets_the_secure_messaging_class ... ok test crypto::brainpool_p384::tests::generator_times_order_is_infinity ... ok test result: ok. 34 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/handshake_entry.rs (target/debug/deps/handshake_entry-4cecc268cbc70f4d) running 2 tests test opening_status_word_failure_names_the_stage ... ok test transport_state_transition_surfaces_as_an_outcome ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/public_api_contracts.rs (target/debug/deps/public_api_contracts-b5c1b033e4721b41) running 1 test Checking refineid-pace-tests v0.0.0 (~/src/refineid-core/target/tests/trybuild/refineid-pace) Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.05s test tests/ui/no_raw_can.rs ... ok test sensitive_values_have_no_public_raw_access ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.23s Running unittests src/lib.rs (target/debug/deps/refineid_pcsc-07041284161f9483) running 5 tests test tests::protocols_mask_and_fallback_mapping ... ok test tests::response_chaining_61xx_collects_body ... ok test tests::short_case4_to_case3_conversion ... ok test tests::single_exchange_returns_response ... ok test tests::stalled_61xx_chain_fails ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/refineid_pin_cache-352cd9cbf4518455) running 5 tests test tests::a_different_slot_is_not_rejected ... ok test tests::a_different_value_is_not_rejected ... ok test tests::a_different_serial_is_not_rejected ... ok test tests::recorded_value_is_rejected_for_its_serial_and_slot ... ok test tests::recording_the_same_value_twice_is_deduped ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/refineid_pkcs11-a284346019cb84c8) running 36 tests test api::tests::function_list_sign_slot_points_at_c_sign ... ok test api::tests::padded_field_is_space_padded_and_truncated ... ok test api::tests::user_pin_flags_follow_live_five_try_policy ... ok test api::tests::versions_are_calver_and_v240 ... ok test pin::tests::pin_role_error_debug_does_not_leak_candidate_length_or_offset ... ok test pin::tests::pin_role_error_display_is_always_shape_only ... ok test sign::tests::accepts_sha256_with_absent_params ... ok test sign::tests::accepts_sha256_with_null_params ... ok test sign::tests::ecdsa_digest_rejects_degenerate_values ... ok test sign::tests::ecdsa_digest_rejects_empty_input ... ok test sign::tests::ecdsa_digest_sha256_left_pads_to_the_same_integer ... ok test sign::tests::ecdsa_digest_sha384_passes_through ... ok test sign::tests::ecdsa_digest_sha512_keeps_the_leftmost_384_bits ... ok test sign::tests::mechanism_signature_lengths_match_card_profiles ... ok test sign::tests::rejects_sha1_digest_info ... ok test sign::tests::rejects_sha384_digest_info ... ok test sign::tests::rejects_sha512_digest_info ... ok test sign::tests::rejects_truncated_and_trailing_garbage ... ok test sign::tests::rsa_digest_info_rejects_all_zero_digest ... ok test state::tests::aid_answering_cert_failing_card_yields_no_slot ... ok test state::tests::contention_preserves_existing_slot_presence ... ok test state::tests::rejected_pin_survives_logout_and_session_close ... ok test state::tests::rejected_pin_survives_module_state_recreation ... ok test state::tests::select_refusing_card_yields_no_slot ... ok test state::tests::session_state_mapping ... ok test state::tests::sessions_open_and_close ... ok test state::tests::slot_events_report_each_presence_change_once ... ok test state::tests::slot_ids_are_stable_and_ordered ... ok test state::tests::temporary_reader_contention_is_not_a_card_state_change ... ok test token::tests::der_integer_short_form ... ok test token::tests::der_length_long_form_one_octet ... ok test token::tests::der_octet_string_short_form ... ok test token::tests::empty_der_span_is_an_absent_attribute ... ok test token::tests::object_kind_handle_round_trip ... ok test token::tests::pin1_verify_guard_blocks_only_one_and_two_attempts ... ok test token::tests::refined_trust_store_invariants ... ok test result: ok. 36 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/refineid_pkcs15-d9631cbf6f567289) running 12 tests test tests::activation_pin_lengths_follow_the_generation ... ok test token_info::tests::a_missing_mandatory_version_is_a_hard_error ... ok test token_info::tests::malformed_outer_structure_is_a_hard_error ... ok test token_info::tests::optional_fields_read_as_absent ... ok test token_info::tests::parses_the_populated_fields ... ok test token_serial::tests::hex_round_trips_through_decode ... ok test token_serial::tests::newer_serial_renders_to_ascii ... ok test token_serial::tests::newer_shape_derives_the_printed_tail ... ok test token_serial::tests::non_printable_bytes_keep_the_hex_form ... ok test token_serial::tests::odd_length_hex_keeps_the_original ... ok test token_serial::tests::older_shape_derives_the_printed_window ... ok test token_serial::tests::unrecognised_shapes_derive_nothing ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/card_reads.rs (target/debug/deps/card_reads-b78a5fe11a6a460c) running 10 tests test absent_slot_surfaces_file_not_found ... ok test authentication_certificate_reads_across_chunks ... ok test empty_first_read_is_reported_as_empty ... ok test esign_file_identifier_falls_back_from_child_to_any_file ... ok test overlong_response_body_is_rejected ... ok test oversized_declared_object_is_rejected ... ok test select_mf_falls_back_to_the_by_name_variant ... ok test signature_certificate_falls_back_to_the_esign_file_identifier ... ok test signature_certificate_prefers_the_named_esign_directory ... ok test token_info_reads_and_parses ... ok test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/refineid_rapp-ced0a53dad359d7e) running 25 tests test journal::tests::command_is_persisted_before_it_is_exposed_to_transport ... ok test journal::tests::crash_recovery_is_ambiguous_and_never_retryable ... ok test offer::tests::monotonic_deadline_is_live_only_inside_original_interval ... ok test offer::tests::monotonic_deadline_rejects_overflow ... ok test policy::tests::first_authenticated_violation_revokes_immediately ... ok test policy::tests::unauthenticated_integrity_failure_cannot_erase_pair ... ok test proxy_engine::tests::authenticated_granted_request_reaches_prerequisite_inspection ... ok test proxy_engine::tests::authenticated_out_of_grant_request_is_a_protocol_violation ... ok test offer::tests::offer_uri_round_trip_preserves_secret_and_hash ... ok test state::tests::credential_rejection_revokes_pairing_on_the_first_incident ... ok test state::tests::first_authenticated_violation_revokes_pairing ... ok test state::tests::integrity_failure_never_revokes_pairing ... ok test stream::tests::candidate_parameters_bound_endpoint_count ... ok test stream::tests::candidate_parameters_reject_unknown_keys ... ok test stream::tests::candidate_parameters_round_trip ... ok test stream::tests::oversized_preamble_is_rejected_before_parsing ... ok test stream::tests::pairing_preamble_round_trips ... ok test stream::tests::pairing_preamble_with_token_bytes_is_rejected ... ok test stream::tests::session_preamble_round_trips ... ok test stream::tests::session_preamble_with_short_token_is_rejected ... ok test stream::tests::unknown_purpose_is_its_own_rejection ... ok test stream::tests::wrong_domain_is_rejected ... ok test wire::tests::deterministic_map_round_trips ... ok test wire::tests::noncanonical_integer_is_rejected ... ok test wire::tests::sequence_mismatch_is_attributable_after_decryption ... ok test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/rapp_conformance_vectors.rs (target/debug/deps/rapp_conformance_vectors-d47b4fc01f1c599c) running 7 tests test derived_identifiers_match_golden_values ... ok test corpus_metadata_and_names_are_stable ... ok test deterministic_cbor_matches_golden_bytes_and_round_trips ... ok test forbidden_and_noncanonical_cbor_is_rejected_by_class ... ok test grants_hash_normalizes_profile_order_and_matches_golden_values ... ok test request_hash_preimage_and_digest_match_golden_values ... ok test stream_rendezvous_preambles_match_golden_bytes_and_rejections ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/rapp_envelope_conformance_vectors.rs (target/debug/deps/rapp_envelope_conformance_vectors-171001b6e4c0bc4f) running 1 test test malformed_or_unsupported_envelopes_match_the_versioned_corpus ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/rapp_interoperability.rs (target/debug/deps/rapp_interoperability-011eabb0bcf527c0) running 4 tests test credential_rejection_durably_revokes_the_pair ... ok test first_authenticated_wrong_phase_message_revokes_pairing ... ok test unauthenticated_ciphertext_failure_closes_only_session ... ok test pairing_and_fresh_session_interoperate_end_to_end ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/rapp_noise_conformance_vectors.rs (target/debug/deps/rapp_noise_conformance_vectors-e34e24c83e1d9077) running 1 test test fixed_noise_transcripts_match_the_versioned_corpus ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/rapp_operation_lifecycle.rs (target/debug/deps/rapp_operation_lifecycle-56a42b8ae39526ef) running 7 tests test duplicate_commit_cannot_create_another_card_command ... ok test crash_after_transmission_is_ambiguous_and_never_retried ... ok test durable_commit_precedes_the_only_physical_command ... ok test lost_ack_retains_result_and_forbids_automatic_replay ... ok test persistence_failure_prevents_command_exposure ... ok test result_is_durable_before_release_and_acknowledgment_erases_it ... ok test request_hash_is_bound_to_semantics_but_not_local_time_or_expiry ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/rapp_session_conformance_vectors.rs (target/debug/deps/rapp_session_conformance_vectors-e2544a819b895d12) running 3 tests test proxy_rejects_every_operation_outside_the_authenticated_grant_set ... ok test exact_directional_sequence_and_session_binding_match_the_corpus ... ok test visible_wire_version_rejects_downgrades_and_unknown_upgrades ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/rapp_state_model.rs (target/debug/deps/rapp_state_model-7c8f875f5642633b) running 3 tests test formal_document_version_is_the_reviewed_revision ... ok test every_formal_transition_is_implemented ... ok test rust_defines_no_transition_absent_from_the_formal_model ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/rapp_wire_adversarial.rs (target/debug/deps/rapp_wire_adversarial-23ef08eb106e3d1a) running 5 tests test claimed_array_capacity_is_bounded_by_remaining_input ... ok test claimed_map_work_is_bounded_by_remaining_input ... ok test nested_values_stop_at_the_protocol_depth_limit ... ok test public_decoder_rejects_input_larger_than_one_plaintext_frame ... ok test text_length_is_rejected_before_payload_allocation ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/refineid_remote-61b8faf23fba7042) running 4 tests test tests::certificate_reads_are_owned_by_the_key_matching_profile ... ok test tests::display_text_is_bounded_and_non_empty ... ok test tests::registry_names_round_trip ... ok test tests::signature_requests_hold_their_invariants_by_construction ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/refineid_sign-bf5f569514ab3390) running 19 tests test commands::tests::algorithm_references_pack_the_documented_bytes ... ok test commands::tests::decipher_references_pack_the_documented_bytes ... ok test commands::tests::expected_length_le_is_exact_when_it_fits_and_maximal_otherwise ... ok test commands::tests::mse_set_ct_names_the_confidentiality_template ... ok test commands::tests::mse_set_for_the_signature_key_matches_the_specified_wire ... ok test commands::tests::mse_set_names_the_authentication_key_in_the_signature_template ... ok test commands::tests::organizational_mse_set_names_the_local_qualified_key ... ok test commands::tests::pso_cds_empty_matches_the_specified_wire ... ok test commands::tests::pso_cds_inline_carries_the_digest_between_lc_and_le ... ok test commands::tests::pso_decipher_chains_the_padding_indicator_and_cryptogram ... ok test commands::tests::pso_hash_length_byte_tracks_the_digest ... ok test commands::tests::pso_hash_sha256_matches_the_specified_wire ... ok test container::tests::a_modulus_wide_cryptogram_constructs ... ok test container::tests::a_short_cryptogram_is_rejected ... ok test container::tests::a_signature_of_the_fixed_length_constructs ... ok test container::tests::a_signature_of_the_wrong_length_is_rejected ... ok test container::tests::an_empty_signature_is_rejected ... ok test container::tests::every_rsa_signature_scheme_is_modulus_wide ... ok test container::tests::recovered_plaintext_debug_shows_only_the_length ... ok test result: ok. 19 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/sign_flow.rs (target/debug/deps/sign_flow-6cf75407d2a255a7) running 12 tests test a_status_word_failure_names_the_stage ... ok test an_unexpected_signature_length_is_rejected ... ok test citizen_ecdsa_p384_sha256_uses_the_negotiated_hash_reference ... ok test citizen_ecdsa_p384_signs_over_the_loaded_hash ... ok test citizen_rsa_pss_sha384_uses_the_matching_hash_and_pss_reference ... ok test citizen_rsa_pss_signs_over_the_loaded_hash_under_the_pss_reference ... ok test citizen_rsa_pss_sha512_uses_the_matching_hash_and_pss_reference ... ok test citizen_rsa_sha256_drives_the_three_command_chain ... ok test citizen_rsa_sha384_drives_the_three_command_chain ... ok test organizational_sign_skips_pso_hash_and_carries_the_digest_inline ... ok test citizen_rsa_sha512_drives_the_three_command_chain ... ok test rsa_decipher_sets_the_confidentiality_template_and_chains_the_cryptogram ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (target/debug/deps/refineid_x509-81fdac7b7d96cf4b) running 16 tests test tests::finds_the_key_when_the_version_field_is_absent ... ok test tests::reconstructs_a_p256_key ... ok test tests::reconstructs_a_p384_key_with_its_coordinates ... ok test tests::reconstructs_an_rsa_3072_key ... ok test tests::rejects_a_compressed_ec_point ... ok test tests::rejects_a_point_off_its_curve_width ... ok test tests::rejects_a_non_canonical_rsa_modulus ... ok test tests::rejects_an_even_public_exponent ... ok test tests::rejects_an_unknown_algorithm ... ok test tests::rejects_an_unknown_curve ... ok test tests::rejects_extra_integers_in_the_rsa_public_key ... ok test tests::rejects_truncated_der ... ok test tests::rejects_trailing_bytes_after_the_certificate ... ok test tests::rejects_unused_bits_in_the_key_bit_string ... ok test tests::reserializes_the_ec_spki_from_the_typed_meaning ... ok test tests::reserializes_the_rsa_spki_from_the_typed_meaning ... ok test result: ok. 16 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/main.rs (target/debug/deps/xtask-035f9fa7e23fb6f6) running 17 tests test tests::allows_literals_in_named_constant_definitions ... ok test tests::anonymous_constants_are_not_named_definitions ... ok test tests::cargo_targets_must_be_in_repository_rust_files ... ok test tests::decimal_laundering_is_rejected ... ok test tests::catches_nested_patterns_masks_arrays_and_macro_tokens ... ok test tests::delayed_executable_bodies_do_not_inherit_a_constant_name ... ok test tests::non_rust_text_has_a_strict_zero_radix_policy ... ok test tests::enum_fields_and_attributes_are_not_named_values ... ok test tests::numeric_escapes_and_documented_hex_are_rejected ... ok test tests::only_generated_build_and_git_paths_are_ignored ... ok test tests::opaque_macro_tokens_never_inherit_a_constant_name ... ok test tests::ordinary_rust_comments_are_checked_lexically ... ok test tests::policy_exemption_covers_only_the_admitted_subtrees ... ok test tests::only_reviewed_transparent_macros_are_accepted ... ok test tests::source_tree_symlinks_are_rejected ... ok test tests::tier_zero_control_values_remain_available ... ok test tests::source_indirection_is_prohibited ... ok test result: ok. 17 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s