[Coverage Report] Test Coverage Report — 2026-10-08

[github-actions[bot]]

📊 Test Coverage Report — 2026-10-08

Data limitation: This run could not read the full coverage summary or git history. Shell access was denied for git log and coverage file reads, so the overall percentages, security-critical file status, and the 7-day change list below are incomplete. Only the pre-identified gap brief was available.

Overall Coverage

Not available in this run. The brief lists only files with gaps and does not include a project-wide total.

🛡️ Security-Critical Path Status

The brief does not flag src/host-iptables.ts, src/squid-config.ts, src/docker-manager.ts, src/domain-patterns.ts, or src/cli.ts as having gaps. That suggests they are above the reporting threshold, but I could not confirm their actual numbers.

📋 Coverage Table

Priority	File	Statements	Branches
CRITICAL	src/nvx/cleanup-registry.ts	42.80%	32.11%
CRITICAL	src/bounded-execution/finite-cardinality.ts	46.03%	35.29%
LOW	src/microvm/network-reservation.ts	51.50%	54.86%
LOW	src/bounded-execution/finite-disclosure.ts	51.78%	11.42%
LOW	src/bounded-execution/finite-schema.ts	57.07%	56.88%

🔧 Function Audit

Not performed. Function-level data was not available.

📅 Recent Source Changes (last 7 days)

Not available. git log was denied in this run.

🔎 Notable Findings

• Two files are flagged CRITICAL with statement coverage under 50%: nvx/cleanup-registry.ts and bounded-execution/finite-cardinality.ts.
• bounded-execution/finite-disclosure.ts has very low branch coverage (11.42%) despite moderate statement coverage, which suggests error and disclosure branches are untested.
• nvx/cleanup-registry.ts has a test file (cleanup-registry.test.ts), so the low coverage likely comes from uncovered branches or error paths.

🎯 Recommendations

1. High: Add tests for src/nvx/cleanup-registry.ts covering cleanup failure and partial-cleanup branches. Target at least 70% branch coverage.
2. High: Add tests for src/bounded-execution/finite-cardinality.ts, focusing on boundary and overflow cases.
3. Medium: Re-run this report with shell access so the overall total, security-critical file numbers, and 7-day change list can be filled in.
4. Low: Improve branch coverage in src/bounded-execution/finite-disclosure.ts.

Generated by Test Coverage Reporter · copilot · sum00 · 0.801 AIC · ⊞ 7K · ◷

• expires on Oct 15, 2026, 5:08 PM UTC