Skip to content

declare the seven implemented-undeclared contract-test service capabilities - #549

Draft
JackDanger wants to merge 1 commit into
mainfrom
land/py-cap-declare-2026-10-31
Draft

JackDanger wants to merge 1 commit into
mainfrom
land/py-cap-declare-2026-10-31

Conversation

@JackDanger

Copy link
Copy Markdown

The contract-test service's capabilities status list omits seven capabilities the SDK itself implements (each verified against the SDK's own config/implementation bytes first-hand). This declare is status-list-only — no op bodies change.

capability evidence in this repo
service-endpoints ldclient/config.py base_uri (L297) / stream_uri (L301) / events_uri (L298)
wrapper ldclient/config.py wrapper_name/wrapper_version (L319+)
tls:custom-ca ldclient/config.py ca_certs (L118) → ldclient/impl/http.py PoolManager(ca_certs=...) (L83)
tls:skip-verify-peer ldclient/config.py disable_ssl_verification (L120) → cert_reqs='CERT_NONE' (ldclient/impl/http.py L75)
tls:verify-peer the default cert_reqs='CERT_REQUIRED' posture (ldclient/impl/http.py L78-80)
http-proxy ldclient/config.py http_proxy (L117) → urllib3.ProxyManager (L91)
filtering-strict ldclient/config.py all_attributes_private (L240) — the strict attribute-redaction bucket

Context: the centinel cross-SDK contract verifier's capability-honesty gate prices declared ⊇ bank-required per subject; these seven rows price required-but-undeclared on the declared-cap surface of record.

via LD Research 🤖

Co-Authored-By: Kimi (LD Research via termag)

…status list transport-only, no op bodies): service-endpoints (LDConfig base_uri/stream_uri/events_uri), wrapper (Config.wrapper_name/wrapper_version), tls:custom-ca (Config.ca_certs negotiated through urllib3 PoolManager ca_certs), tls:skip-verify-peer (Config.disable_ssl_verification cert_reqs CERT_NONE), tls:verify-peer (the default CERT_REQUIRED posture), http-proxy (Config.http_proxy ProxyManager seam), filtering-strict (Config.all_attributes_private strict redaction bucket) — each verified against the SDK's own public config/implement bytes first-hand; the campaign's G2 capability-honesty floor prices the declared deck required-but-undeclared; flagged via the centinel capability-honesty window (roster subject python-server-sdk). via LD Research 🤖; Co-Authored-By: Kimi (LD Research via termag); Generated-by: termag

Generated-by: termag
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant