Publish curated Unraid-AppOps-Gateway source from a506550ef83ef2d81651e37c98a89f7ee330c730

backend/tests/test_appops_live_state_recovery.py

@@ -123,9 +123,14 @@ def test_reattest_preserves_evidence_and_observed_legacy_identity(recovery):
     before = r.path.read_bytes()
     compose = (r.repo / "docker-compose.yml").read_bytes()
     result = r.m.reattest_appops_live_state(r.project, r.repo, OBSERVED)
+    read_state, read_raw, read_sha256 = r.m.read_appops_state_preimage(r.project)
     state = json.loads(r.path.read_bytes())
     backup = r.path.parent / result["backupFile"]
     assert backup.read_bytes() == before
+    assert read_state == state
+    assert read_raw == r.path.read_bytes()
+    assert read_sha256 == hashlib.sha256(read_raw).hexdigest()
+    assert os.name == "nt" or (backup.stat().st_mode & 0o777) == 0o600
     assert state["recovery"]["prior_state_sha256"] == hashlib.sha256(before).hexdigest()
     assert state["last_attempt"] == r.prior["last_attempt"]
     assert state["live_revision"] == OBSERVED