Skip to content

#49: oauth conformance provisioner (charon-client refresh token -> Keychain) - #6

Merged
xianxu merged 3 commits into
mainfrom
000049-oauth-conformance-provisioner-for-the-real-google-grounding-token-certify-the-fake
Jun 8, 2026
Merged

xianxu merged 3 commits into
mainfrom
000049-oauth-conformance-provisioner-for-the-real-google-grounding-token-certify-the-fake

Conversation

@xianxu

@xianxu xianxu commented Jun 8, 2026

Copy link
Copy Markdown
Owner
  • #49: close — oauth fake certified against real Google (status: done, actual 0.11h)
  • #49: certify oauth fake against real Google (PASS) + record grounding
  • #49: oauth conformance provisioner (charon-client refresh token -> Keychain)

xianxu and others added 3 commits June 8, 2026 13:15
…ychain)

cmd/oauth-conformance-provision runs charon's own Google consent flow and
stores the resulting refresh token in nous-oauth-conformance-google (the entry
contract_real_test.go reads) — a token bound to charon's client, the only kind
that refreshes under it. Service name extracted to oauth.ConformanceKeychainService
(one source of truth, read+write agree by construction). Pure keychainStoreArgs
unit-tested; exec at the boundary. SKILL.md documents provision->certify->re-cert
(+ MS template note for #48).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
go test -tags conformance Contract_Real PASSED with a throwaway-account refresh
token provisioned via cmd/oauth-conformance-provision. Recorded the first
certification in the oauth-credential-lifecycle target Revisions and the e2e
atlas (grounding column now backed by a passing run, not just wired).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
…actual 0.11h)

Review-Verdict: SHIP
Review-Window: fb90abc..HEAD

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@xianxu
xianxu merged commit d17207f into main Jun 8, 2026
1 check passed
@xianxu
xianxu deleted the 000049-oauth-conformance-provisioner-for-the-real-google-grounding-token-certify-the-fake branch June 8, 2026 20:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant