---
id: w6/m6/t009
title: Test coverage
worker: worker6
status: done
estimate: 30m
depends_on: [w6/m6/t007]
---

## Objective

Add meaningful tests for the behavior this milestone shipped — in particular, turn t004's network-policy conformance check into a repeatable automated test.

## Context

- t004 produces a scripted reachability test; this task wires it into the test suite (or a CI-runnable script) so it isn't a one-off.
- Any remediation from t001/t003/t005/t006 (RBAC tightening, injection fixes, redaction, OAuth checks) should get a regression test where feasible.

## Steps

1. Wire t004's reachability script into `make test-e2e` or an equivalent CI-runnable target.
2. Add unit/integration tests for any code fixes from t003 (injection), t005 (redaction), t006 (OAuth checks).
3. Ensure tests assert real behavior/failure modes, not tautological checks.

## Files

- Test files alongside whatever t001–t006 modified.

## Acceptance criteria

- [ ] Network-policy conformance test is automated and repeatable.
- [ ] Code fixes from this milestone have regression tests.

## Out of scope

- Retrofitting test coverage for pre-existing code this milestone didn't touch.
