weichenandCursor 479b7afa33 Walk the live password-change gate in k6 load setup ...

Why: Admin-created load users still have must_change; business APIs return 403 text and k6 json() crashes.
Evidence: brew k6 v2.3.0 smoke --seed tiny (653/653 checks, fail=0); --instances 2 (765/765, cross-read 30, dup_seq=0).
Impact: Load suite matches the real first-login set-password flow; no SQL backdoor for k6 users.
Refs: server/auth.go enforcePasswordGate; U7 run_load.sh
Co-authored-by: Cursor <cursoragent@cursor.com>

2026-10-12 06:11:13 +00:00

..

integration/multi-instance

Clear must_change before API-key use in multi-instance U7

2026-10-12 05:24:02 +00:00

load/collaboration

Walk the live password-change gate in k6 load setup

2026-10-12 06:11:13 +00:00

test_ci_credentials.py

Lock CI checkout credential scope to the injected server and allowlist

2026-10-05 13:45:58 +00:00

test_evidence.py

Close review gaps in cleanup and evidence handling

2026-10-05 13:07:10 +00:00

test_svc_backup.py

Add svc.sh agent data-dir snapshots with SQLite-consistent backup

2026-10-12 03:06:04 +00:00

test_svc_identity.py

Wire U1 I3 DB identity into svc start and tests

2026-10-12 03:52:48 +00:00

test_svc_precheck.py

Merge origin/main: supersede the PR #317 minimal fix with the unified resolver

2026-10-11 09:21:27 +00:00

test_svc_recover.py

Merge authoritative main into the task branch

2026-10-12 05:27:29 +00:00

test_svc_user_binding.py

Bind svc user CLI to instance storage and reject lock bypass

2026-10-12 03:55:24 +00:00

test_svc.py

Add an rdm deploy source to svc (downstream composite binary)

2026-10-11 20:46:03 +00:00

test_task.py

Disable auto-gc in the task-lifecycle remote fixture

2026-10-09 17:10:18 +00:00

test_write_guard.py

Make development gates preserve work and verifiable evidence

2026-10-05 12:36:02 +00:00