From 514d9e489d7e1ec87fa097ce3cb4703c5ef66734 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?G=C3=A1bor=20Z=20Sink=C3=B3?= <sinkog@centralinfracore.hu>
Date: Sat, 14 Nov 2026 21:43:06 +0100
Subject: [PATCH] TEST ONLY, DO NOT MERGE: one production file is left out of
 the inventory (proof that the L3 completeness check turns the job red)

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEUCIAiZtDr0XjL/wb8UaQukfCtsdDNCXzPerKIVs/oznHgFAiEAnKSLMH3XmhNQcmnx55zCJn7WMBDxXQx0R2F93PWOYFY=
hash-algorithm = sha256
digest = /f2tVHDeGezceQQiUaEsIuS6e+foatnGK1HrHLVB15I=

[certificate]
-----BEGIN CERTIFICATE-----
MIICBjCCAaygAwIBAgIUSnRMR6RPnEbg296XWPOqq/u5PCwwCgYIKoZIzj0EAwIw
QzELMAkGA1UEBhMCSFUxGTAXBgNVBAoMEENlbnRyYWxJbmZyYUNvcmUxGTAXBgNV
BAMMEENJQyBEZXZlbG9wZXIgQ0EwHhcNMjYwMzIwMTMyMjU5WhcNMjYxMjMxMTMy
MjU5WjBFMQswCQYDVQQGEwJIVTEZMBcGA1UECgwQQ2VudHJhbEluZnJhQ29yZTEb
MBkGA1UEAwwSR2Fib3IgWm9sdGFuIFNpbmtvMFkwEwYHKoZIzj0CAQYIKoZIzj0D
AQcDQgAEIG2CVmTfmLB9pLLclj7YmP2eedAjklpy4LGrU2ijoiy6Xqpuybv7OgJe
i+ez31s65NEV8+X/ByeX1cstR988z6N8MHowCQYDVR0TBAIwADAdBgNVHQ4EFgQU
yZN6AIX/TNnIJ9GwAa/NRN3ujHAwHwYDVR0jBBgwFoAUXn6CHYzPUqU4JVP8g+OS
WeDYjhcwDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF
BQcDBDAKBggqhkjOPQQDAgNIADBFAiEA+bFzXRoJ4PCQbhAAtpkcMjt0vNj5rEW0
lOMBGDNyaWkCIB1vmM7PcZzv/c9bIrxF5kqv6QXomouhByUfeNUTbpKW
-----END CERTIFICATE-----
---
 .github/workflows/object-evidence.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/object-evidence.yml b/.github/workflows/object-evidence.yml
index ca778a6..00f83fe 100644
--- a/.github/workflows/object-evidence.yml
+++ b/.github/workflows/object-evidence.yml
@@ -57,7 +57,9 @@ jobs:
           (cd tools/objinventory && go build -o "$T/objinventory" .)
           # Go, root module: the production files of the scope, the cover profile of the whole module
           python3 scripts/object_model.py scope-list --root . --scope .measurement-scope.json --lang go --class production > "$T/go-files.txt"
-          "$T/objinventory" $(cat "$T/go-files.txt") > "$T/go-inventory.json"
+          # DELIBERATE DEFECT (CI proof branch, never to be merged): the last production file is left out of the
+          # inventory, so the object list is incomplete and the L3 check must turn this job red.
+          "$T/objinventory" $(head -n -1 "$T/go-files.txt") > "$T/go-inventory.json"
           go test -count=1 -covermode=set -coverprofile="$T/go-cover.out" ./...
           # Go, the separate goastdump module: its own inventory and profile
           (cd tools/goastdump && "$T/objinventory" main.go > "$T/goastdump-inventory.json" \