Contracts have unit tests but no fuzz/invariant coverage of the trickier logic (threshold comparisons, batch all-or-nothing, expiry transitions).
Scope
- Add fuzz tests over check_claim threshold boundaries and trusted_issuers combinations.
- Add invariant tests: a batch either fully applies or fully reverts; a revoked or expired proof never reads valid; counters (if added) never go negative.
- Run in CI.
Value
Higher confidence in the security-critical read/write paths.
Acceptance
- Fuzz/invariant tests cover check_claim boundaries and batch atomicity, running in CI.
Contracts have unit tests but no fuzz/invariant coverage of the trickier logic (threshold comparisons, batch all-or-nothing, expiry transitions).
Scope
Value
Higher confidence in the security-critical read/write paths.
Acceptance