v0.3.14-pre.013

crates/ksp-worker-raw-transaction-ingest-lib/tests/hardening.rs

@@ -1,5 +1,5 @@
 // file: crates/ksp-worker-raw-transaction-ingest-lib/tests/hardening.rs
-// version: 36
+// version: 37
 
 //! External public, security, redaction and release-boundary hardening canaries through `v0.3.14-pre.011`.
 
@@ -1352,3 +1352,25 @@ fn v0_3_14_pre_012_shutdown_races_are_bounded_across_source_and_worker_drains()
     }
     return;
 }
+
+#[test]
+fn v0_3_14_pre_013_cross_layer_completeness_security_closure_is_exact_and_redacted() {
+    let cross_layer = include_str!("cross_layer_completeness.rs");
+    let dependency_boundary = include_str!("dependency_boundary.rs");
+    let public_api = include_str!("public_api.rs");
+    for required in [
+        "v0_3_14_pre_013_gap_repair_closure_keeps_one_transport_worker_common_raw_store_pipeline",
+        "v0_3_14_pre_013_security_redaction_covers_gap_repair_and_terminal_paths",
+        "v0_3_14_pre_013_legacy_v0_v1_remains_proven_after_gap_repair_hardening",
+        "v0_3_14_pre_013_worker_and_backfill_remain_independent_producers",
+    ] {
+        assert!(cross_layer.contains(required), "pre.013 cross-layer hardening proof missing: {required}");
+    }
+    assert!(dependency_boundary.contains("v0_3_14_pre_013_cross_layer_closure_keeps_dependency_and_producer_boundaries_exact"));
+    assert!(public_api.contains("v0_3_14_pre_013_completeness_closure_adds_no_public_surface"));
+    let root = include_str!("../src/lib.rs");
+    for forbidden in ["source_key", "provider_gap", "endpoint_gap", "signature_gap", "payload_gap", "pub mod "] {
+        assert!(!root.contains(forbidden), "pre.013 public Worker root leaked forbidden material: {forbidden}");
+    }
+    return;
+}