gardesk/garcard / d9e7a02

+10. `examples/sprint-08-parity-matrix.md`

+11. `examples/validate-sprint-08-parity.sh`

+# Sprint 08 Parity Matrix

+

+Use this matrix to certify behavior against mature desktop PolicyKit agents.

+

+## Automated Prerequisites

+1. `cargo test --workspace`

+2. `./examples/validate-sprint-08-parity.sh`

+

+## Matrix

+| Scenario | Procedure | Expected Result | Status | Evidence |

+| --- | --- | --- | --- | --- |

+| Success path | Trigger `pkcheck --allow-user-interaction --process $$ --action-id com.mesonbuild.install.run` and enter correct password | Prompt completes, auth is authorized, no failure flash | Pending | daemon log + `garcardctl auth-summary` |

+| Failure path | Trigger same `pkcheck` and enter wrong password | Prompt flashes error, reprompts in place, `auth-summary.last_outcome=failure` before retry | Pending | daemon log + `garcardctl auth-summary` |

+| Cancel path | Trigger `pkcheck`, cancel prompt | Request exits cleanly, `auth-summary.last_outcome=canceled` | Pending | daemon log + `garcardctl auth-summary` |

+| Timeout path | Set short timeout (`GARCARD_PROMPT_TIMEOUT_SECS=2`), trigger auth, do not respond | Request times out, `auth-summary.last_outcome=timeout` | Pending | daemon log + `garcardctl auth-summary` |

+| Multi-identity flow | Trigger policy requiring identity choice | Identity list rendered, selected identity is honored | Pending | prompt capture + daemon log |

+| Retention choice flow | Trigger policy exposing retention options | Retention choice accepted and recorded in `auth-summary` | Pending | `garcardctl auth-summary` |

+| Temp auth introspection | Run `garcardctl temp-list` after successful retained auth | Active temporary authorization entries are listed | Pending | command output |

+| Temp auth revoke single | Run `garcardctl temp-revoke <id>` | Target authorization removed | Pending | `temp-list` before/after |

+| Temp auth revoke all | Run `garcardctl temp-revoke-all` | All temporary authorizations removed | Pending | `temp-list` before/after |

+| Daemon restart during lifecycle | Restart daemon and rerun status/diag/temp commands | Control plane recovers without stale socket state | Pending | `validate-sprint-07.sh` output |

+| Polkit restart recovery | Restart polkit and relaunch daemon | Diagnostics recover, control commands remain responsive | Pending | script output + daemon log |

+

+## Signoff

+1. Date:

+2. Operator:

+3. Result (`PASS`/`FAIL`):

+4. Blocking gaps:

+#!/usr/bin/env bash

+set -euo pipefail

+

+REPORT_FILE="${GARCARD_SPRINT08_REPORT_FILE:-${PWD}/target/sprint-08-parity-evidence.md}"

+RUN_INTERACTIVE="${GARCARD_SPRINT08_RUN_INTERACTIVE:-0}"

+ACTION_ID="${GARCARD_SPRINT08_ACTION_ID:-com.mesonbuild.install.run}"

+

+mkdir -p "$(dirname "${REPORT_FILE}")"

+

+timestamp() {

+  date -u +"%Y-%m-%dT%H:%M:%SZ"

+}

+

+append_section() {

+  local heading="$1"

+  {

+    echo

+    echo "## ${heading}"

+    echo

+  } >>"${REPORT_FILE}"

+}

+

+{

+  echo "# Sprint 08 Parity Evidence"

+  echo

+  echo "- generated_at: $(timestamp)"

+  echo "- host: $(hostname)"

+  echo "- action_id: ${ACTION_ID}"

+  echo

+} >"${REPORT_FILE}"

+

+append_section "Workspace Tests"

+cargo test --workspace | tee -a "${REPORT_FILE}"

+

+append_section "Sprint 04 Reliability Baseline"

+./examples/validate-sprint-04.sh | tee -a "${REPORT_FILE}"

+

+append_section "Sprint 07 Lifecycle Baseline (Non-Interactive)"

+GARCARD_SPRINT07_RUN_PKCHECK=0 ./examples/validate-sprint-07.sh | tee -a "${REPORT_FILE}"

+

+if [[ "${RUN_INTERACTIVE}" == "1" ]]; then

+  append_section "Sprint 07 Lifecycle Interactive Loop"

+  if command -v pkcheck >/dev/null 2>&1; then

+    GARCARD_SPRINT07_RUN_PKCHECK=1 \

+      GARCARD_SPRINT07_ACTION_ID="${ACTION_ID}" \

+      ./examples/validate-sprint-07.sh | tee -a "${REPORT_FILE}"

+  else

+    echo "pkcheck not found; interactive loop skipped" | tee -a "${REPORT_FILE}"

+  fi

+else

+  append_section "Interactive Loop Status"

+  echo "Skipped interactive parity loop (set GARCARD_SPRINT08_RUN_INTERACTIVE=1 to enable)." \

+    | tee -a "${REPORT_FILE}"

+fi

+

+append_section "Next Manual Matrix Steps"

+{

+  echo "1. Open examples/sprint-08-parity-matrix.md."

+  echo "2. Record PASS/FAIL and attach evidence pointers from this report."

+  echo "3. Add daemon log references for success/failure/cancel/timeout and retention coverage."

+} | tee -a "${REPORT_FILE}"

+

+echo "Sprint 08 parity baseline complete."

+echo "Evidence report: ${REPORT_FILE}"