Add CARING examples and coverage

internal/policy/package_test.go

@@ -50,6 +50,30 @@ func TestLoadPolicyPackageMarkdownValidates(t *testing.T) {
 	}
 }
 
+func TestRedactPolicyPackageMarkdownValidates(t *testing.T) {
+	pkg, err := policy.LoadAndValidateFile(context.Background(), filepath.Join("..", "..", "examples", "caring", "redact_policy_package.md"))
+	if err != nil {
+		t.Fatalf("LoadAndValidateFile: %v", err)
+	}
+
+	if !pkg.Valid {
+		t.Fatalf("pkg.Valid = false\n%s", formatValidation(pkg.Validation))
+	}
+	if len(pkg.Validation.Fixtures) != 1 {
+		t.Fatalf("Validation.Fixtures len = %d; want 1", len(pkg.Validation.Fixtures))
+	}
+	fixture := pkg.Validation.Fixtures[0]
+	if !fixture.Passed {
+		t.Fatalf("fixture failed: %s\nactual: %+v", fixture.Error, fixture.Actual)
+	}
+	if fixture.Actual.Effect != api.DecisionEffectRedact {
+		t.Fatalf("fixture.Actual.Effect = %q; want redact", fixture.Actual.Effect)
+	}
+	if len(fixture.Actual.Obligations) != 1 || fixture.Actual.Obligations[0].Type != "mask_fields" {
+		t.Fatalf("fixture.Actual.Obligations = %+v; want mask_fields", fixture.Actual.Obligations)
+	}
+}
+
 func TestCaringFindingsAreAdvisoryUntilEnforced(t *testing.T) {
 	doc := inlinePolicy(false, "allow")
 	pkg, err := policy.Load([]byte(doc), "inline-policy.md")

internal/registry/manifest_test.go

@@ -30,6 +30,32 @@ func TestRegistryManifestsParse(t *testing.T) {
 	}
 }
 
+func TestExpandedRegistryExamplesParse(t *testing.T) {
+	var subjects api.SubjectManifest
+	loadYAML(t, filepath.Join("..", "..", "examples", "caring", "team_subject_manifest.yaml"), &subjects)
+	if len(subjects.Teams) != 1 || subjects.Teams[0].ID != "team:project-reviewers" {
+		t.Fatalf("subjects.Teams = %+v; want team:project-reviewers", subjects.Teams)
+	}
+
+	var resources api.ResourceManifest
+	loadYAML(t, filepath.Join("..", "..", "examples", "caring", "project_resource_manifest.yaml"), &resources)
+	if len(resources.Resources) != 2 || resources.Resources[1].Parent != "project:alpha-redesign" {
+		t.Fatalf("resources = %+v; want document inheriting from project", resources.Resources)
+	}
+
+	var relationships []api.RelationshipFact
+	loadYAML(t, filepath.Join("..", "..", "examples", "caring", "inherited_relationships.yaml"), &relationships)
+	if len(relationships) != 2 {
+		t.Fatalf("relationships len = %d; want 2", len(relationships))
+	}
+	if relationships[0].Caring == nil || relationships[0].Caring.CanonicalRole != api.CanonicalRoleVerifier {
+		t.Fatalf("relationships[0].Caring = %+v; want Verifier descriptor", relationships[0].Caring)
+	}
+	if relationships[1].Relation != "inherits" {
+		t.Fatalf("relationships[1].Relation = %q; want inherits", relationships[1].Relation)
+	}
+}
+
 func loadYAML(t *testing.T, path string, out any) {
 	t.Helper()