Each task's tests were run against a reference at its end state; the end states were replayed from master in order with the gate at each step (650 to 762 tests); each skeleton compiles against its tests and fails them. The reference is kept off this machine. Lessons T27 (every wait in a test has a limit) and T28 (mutate the reference before hand-over) come from this work. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
TEST-ONLY TLS fixtures
Generated once with openssl on 2026-09-23 for gatewayd's TLS tests. Every key here is public
and must never be trusted anywhere but these tests. The two CA private keys were deleted after
signing; the server keys are kept because the test servers need them.
test-ca.pem: the CA the tests trust (throughca_file).server.pem/server.key:localhostand127.0.0.1, signed bytest-ca.wrong-name.pem/wrong-name.key:wrong.exampleonly, signed bytest-ca(a name mismatch).other-ca.pem,other-server.pem/other-server.key: a CA the tests do not trust.
Valid for 100 years from 2026-09-23.