Publish curated ITWorx_MCP_Hub source from b5607d7532f496660c4a3cbe8db3bc3414a7b36b

tests/test_compose.py

@@ -128,6 +128,12 @@ class ComposeContractTests(unittest.TestCase):
                 encoding="utf-8"
             )
         )
+        security_publication = json.loads(
+            (ROOT / "evidence/WP-400/SECURITY_BASE_PUBLICATION.json").read_text(encoding="utf-8")
+        )
+        self.assertEqual(security_publication["schema"], "itworx.security-base-preparation/v1")
+        self.assertFalse(security_publication["candidateEmitted"])
+        self.assertEqual(security_publication["reportCount"], 5)
         for name in ("postgres", "redis"):
             with self.subTest(service=name):
                 image_evidence = evidence["images"][name]
@@ -135,18 +141,22 @@ class ComposeContractTests(unittest.TestCase):
                 candidate_proof = publication_proof["candidates"][name]
                 self.assert_database_candidate_pin(
                     name,
-                    self.document["services"][name]["image"],
-                    image_evidence,
-                    publication,
-                    candidate_proof,
-                )
-                self.assert_database_candidate_pin(
-                    name,
-                    integration["services"][name]["image"],
+                    image_ref,
                     image_evidence,
                     publication,
                     candidate_proof,
                 )
+                if name == "postgres":
+                    prepared = next(
+                        row
+                        for row in security_publication["preparedImages"]
+                        if row["service"] == name
+                    )
+                    self.assertEqual(prepared["parentRef"], image_ref)
+                    self.assertTrue(prepared["runtimeVerified"])
+                    self.assertTrue(prepared["vulnerabilityAndSecretVerified"])
+                    self.assertRegex(prepared["imageId"], r"^sha256:[0-9a-f]{64}$")
+                    image_ref = prepared["imageRef"]
                 self.assertEqual(image_ref, self.document["services"][name]["image"])
                 self.assertEqual(image_ref, integration["services"][name]["image"])