Skip to content

Trace: verify Pi credentials warning #3723

Open

Description

@waveywaves

Problem

The Pi credentials-warning cell is Unknown. A real trace run on PR #3719 warned for expired or malformed credentials, but no isolated check proves the user-visible Pi notification contract or the no-warning cases.

Scope

Verify Pi's session-start credentials guidance. Keep this separate from uploading an attestation or showing a session link.

Acceptance criteria

  • With rejected credentials, capture the Pi UI warning directing the user to chainloop auth login.
  • With valid credentials, unreachable control plane, or a check beyond the two-second budget, confirm no false credentials warning.
  • In local mode, confirm no credentials check or warning occurs.
  • Keep the smoke opt-in and isolated from local-only E2E, with deterministic event/state synchronization and no fixed sleeps.
  • Update only the Pi credentials-warning matrix cell after the checked behavior is reproducible.

Non-goals

  • Granting project access or uploading evidence.
  • Welcome-message and post-push-link verification.

Split from #3718; baseline Pi support #3704.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions